usage: openstack [--version] [-v | -q] [--log-file LOG_FILE] [-h] [--debug] [--os-cloud] [--os-region-name ] [--os-cacert ] [--os-cert ] [--os-key ] [--verify | --insecure] [--os-default-domain ] [--os-interface ] [--timing] [--os-beta-command] [--os-profile hmac-key] [--os-compute-api-version ] [--os-network-api-version ] [--os-p_w_picpath-api-version ] [--os-volume-api-version ] [--os-identity-api-version ] [--os-object-api-version ] [--os-auth-type ] [--os-project-domain-id ] [--os-protocol ] [--os-project-name ] [--os-trust-id ] [--os-consumer-key ] [--os-domain-name ] [--os-access-secret ] [--os-user-domain-id ] [--os-access-token-type ] [--os-code ] [--os-identity-provider-url ] [--os-default-domain-name ] [--os-access-token-endpoint ] [--os-access-token ] [--os-domain-id ] [--os-user-domain-name ] [--os-openid-scope ] [--os-user-id ] [--os-identity-provider ] [--os-username ] [--os-auth-url ] [--os-client-secret ] [--os-default-domain-id ] [--os-discovery-endpoint ] [--os-client-id ] [--os-project-domain-name ] [--os-access-key ] [--os-password ] [--os-redirect-uri ] [--os-endpoint ] [--os-url ] [--os-consumer-secret ] [--os-token ] [--os-passcode ] [--os-project-id ]Command-line interface to the OpenStack APIsoptional arguments: --version show program's version number and exit -v, --verbose Increase verbosity of output. Can be repeated. -q, --quiet Suppress output except warnings and errors. --log-file LOG_FILE Specify a file to log output. Disabled by default. -h, --help Show help message and exit. --debug Show tracebacks on errors. --os-cloud Cloud name in clouds.yaml (Env: OS_CLOUD) --os-region-name Authentication region name (Env: OS_REGION_NAME) --os-cacert CA certificate bundle file (Env: OS_CACERT) --os-cert Client certificate bundle file (Env: OS_CERT) --os-key Client certificate key file (Env: OS_KEY) --verify Verify server certificate (default) --insecure Disable server certificate verification --os-default-domain Default domain ID, default=default. (Env: OS_DEFAULT_DOMAIN) --os-interface Select an interface type. Valid interface types: [admin, public, internal]. (Env: OS_INTERFACE) --timing Print API call timing info --os-beta-command Enable beta commands which are subject to change --os-profile hmac-key HMAC key for encrypting profiling context data --os-compute-api-version Compute API version, default=2.1 (Env: OS_COMPUTE_API_VERSION) --os-network-api-version Network API version, default=2.0 (Env: OS_NETWORK_API_VERSION) --os-p_w_picpath-api-version Image API version, default=2 (Env: OS_IMAGE_API_VERSION) --os-volume-api-version Volume API version, default=2 (Env: OS_VOLUME_API_VERSION) --os-identity-api-version Identity API version, default=3 (Env: OS_IDENTITY_API_VERSION) --os-object-api-version Object API version, default=1 (Env: OS_OBJECT_API_VERSION) --os-auth-type Select an authentication type. Available types: v2token, password, admin_token, v3oidcauthcode, v2password, v3samlpassword, v3password, v3oidcaccesstoken, v3oidcpassword, token, v3oidcclientcredentials, v3tokenlessauth, v1password, v3token, v3totp, v3oauth1, token_endpoint. Default: selected based on --os-username/--os-token (Env: OS_AUTH_TYPE) --os-project-domain-id With password: Domain ID containing project With v3oidcauthcode: Domain ID containing project With v3samlpassword: Domain ID containing project With v3password: Domain ID containing project With v3oidcaccesstoken: Domain ID containing project With v3oidcpassword: Domain ID containing project With token: Domain ID containing project With v3oidcclientcredentials: Domain ID containing project With v3tokenlessauth: Domain ID containing project With v3token: Domain ID containing project With v3totp: Domain ID containing project (Env: OS_PROJECT_DOMAIN_ID) --os-protocol With v3oidcauthcode: Protocol for federated plugin With v3samlpassword: Protocol for federated plugin With v3oidcaccesstoken: Protocol for federated plugin With v3oidcpassword: Protocol for federated plugin With v3oidcclientcredentials: Protocol for federated plugin (Env: OS_PROTOCOL) --os-project-name With password: Project name to scope to With v3oidcauthcode: Project name to scope to With v3samlpassword: Project name to scope to With v3password: Project name to scope to With v3oidcaccesstoken: Project name to scope to With v3oidcpassword: Project name to scope to With token: Project name to scope to With v3oidcclientcredentials: Project name to scope to With v3tokenlessauth: Project name to scope to With v1password: Swift account to use With v3token: Project name to scope to With v3totp: Project name to scope to (Env: OS_PROJECT_NAME) --os-trust-id With v2token: Trust ID With password: Trust ID With v3oidcauthcode: Trust ID With v2password: Trust ID With v3samlpassword: Trust ID With v3password: Trust ID With v3oidcaccesstoken: Trust ID With v3oidcpassword: Trust ID With token: Trust ID With v3oidcclientcredentials: Trust ID With v3token: Trust ID With v3totp: Trust ID (Env: OS_TRUST_ID) --os-consumer-key With v3oauth1: OAuth Consumer ID/Key (Env: OS_CONSUMER_KEY) --os-domain-name With password: Domain name to scope to With v3oidcauthcode: Domain name to scope to With v3samlpassword: Domain name to scope to With v3password: Domain name to scope to With v3oidcaccesstoken: Domain name to scope to With v3oidcpassword: Domain name to scope to With token: Domain name to scope to With v3oidcclientcredentials: Domain name to scope to With v3tokenlessauth: Domain name to scope to With v3token: Domain name to scope to With v3totp: Domain name to scope to (Env: OS_DOMAIN_NAME) --os-access-secret With v3oauth1: OAuth Access Secret (Env: OS_ACCESS_SECRET) --os-user-domain-id With password: User's domain id With v3password: User's domain id With v3totp: User's domain id (Env: OS_USER_DOMAIN_ID) --os-access-token-type With v3oidcauthcode: OAuth 2.0 Authorization Server Introspection token type, it is used to decide which type of token will be used when processing token introspection. Valid values are: "access_token" or "id_token" With v3oidcpassword: OAuth 2.0 Authorization Server Introspection token type, it is used to decide which type of token will be used when processing token introspection. Valid values are: "access_token" or "id_token" With v3oidcclientcredentials: OAuth 2.0 Authorization Server Introspection token type, it is used to decide which type of token will be used when processing token introspection. Valid values are: "access_token" or "id_token" (Env: OS_ACCESS_TOKEN_TYPE) --os-code With v3oidcauthcode: OAuth 2.0 Authorization Code (Env: OS_CODE) --os-identity-provider-url With v3samlpassword: An Identity Provider URL, where the SAML2 authentication request will be sent. (Env: OS_IDENTITY_PROVIDER_URL) --os-default-domain-name With password: Optional domain name to use with v3 API and v2 parameters. It will be used for both the user and project domain in v3 and ignored in v2 authentication. With token: Optional domain name to use with v3 API and v2 parameters. It will be used for both the user and project domain in v3 and ignored in v2 authentication. (Env: OS_DEFAULT_DOMAIN_NAME) --os-access-token-endpoint With v3oidcauthcode: OpenID Connect Provider Token Endpoint. Note that if a discovery document is being passed this option will override the endpoint provided by the server in the discovery document. With v3oidcpassword: OpenID Connect Provider Token Endpoint. Note that if a discovery document is being passed this option will override the endpoint provided by the server in the discovery document. With v3oidcclientcredentials: OpenID Connect Provider Token Endpoint. Note that if a discovery document is being passed this option will override the endpoint provided by the server in the discovery document. (Env: OS_ACCESS_TOKEN_ENDPOINT) --os-access-token With v3oidcaccesstoken: OAuth 2.0 Access Token (Env: OS_ACCESS_TOKEN) --os-domain-id With password: Domain ID to scope to With v3oidcauthcode: Domain ID to scope to With v3samlpassword: Domain ID to scope to With v3password: Domain ID to scope to With v3oidcaccesstoken: Domain ID to scope to With v3oidcpassword: Domain ID to scope to With token: Domain ID to scope to With v3oidcclientcredentials: Domain ID to scope to With v3tokenlessauth: Domain ID to scope to With v3token: Domain ID to scope to With v3totp: Domain ID to scope to (Env: OS_DOMAIN_ID) --os-user-domain-name With password: User's domain name With v3password: User's domain name With v3totp: User's domain name (Env: OS_USER_DOMAIN_NAME) --os-openid-scope With v3oidcauthcode: OpenID Connect scope that is requested from authorization server. Note that the OpenID Connect specification states that "openid" must be always specified. With v3oidcpassword: OpenID Connect scope that is requested from authorization server. Note that the OpenID Connect specification states that "openid" must be always specified. With v3oidcclientcredentials: OpenID Connect scope that is requested from authorization server. Note that the OpenID Connect specification states that "openid" must be always specified. (Env: OS_OPENID_SCOPE) --os-user-id With password: User id With v2password: User ID to login with With v3password: User ID With v3totp: User ID (Env: OS_USER_ID) --os-identity-provider With v3oidcauthcode: Identity Provider's name With v3samlpassword: Identity Provider's name With v3oidcaccesstoken: Identity Provider's name With v3oidcpassword: Identity Provider's name With v3oidcclientcredentials: Identity Provider's name (Env: OS_IDENTITY_PROVIDER) --os-username With password: Username With v2password: Username to login with With v3samlpassword: Username With v3password: Username With v3oidcpassword: Username With v1password: Username to login with With v3totp: Username (Env: OS_USERNAME) --os-auth-url With v2token: Authentication URL With password: Authentication URL With v3oidcauthcode: Authentication URL With v2password: Authentication URL With v3samlpassword: Authentication URL With v3password: Authentication URL With v3oidcaccesstoken: Authentication URL With v3oidcpassword: Authentication URL With token: Authentication URL With v3oidcclientcredentials: Authentication URL With v3tokenlessauth: Authentication URL With v1password: Authentication URL With v3token: Authentication URL With v3totp: Authentication URL With v3oauth1: Authentication URL (Env: OS_AUTH_URL) --os-client-secret With v3oidcauthcode: OAuth 2.0 Client Secret With v3oidcpassword: OAuth 2.0 Client Secret With v3oidcclientcredentials: OAuth 2.0 Client Secret (Env: OS_CLIENT_SECRET) --os-default-domain-id With password: Optional domain ID to use with v3 and v2 parameters. It will be used for both the user and project domain in v3 and ignored in v2 authentication. With token: Optional domain ID to use with v3 and v2 parameters. It will be used for both the user and project domain in v3 and ignored in v2 authentication. (Env: OS_DEFAULT_DOMAIN_ID) --os-discovery-endpoint With v3oidcauthcode: OpenID Connect Discovery Document URL. The discovery document will be used to obtain the values of the access token endpoint and the authentication endpoint. This URL should look like https://idp.example.org/.well-known/openid- configuration With v3oidcpassword: OpenID Connect Discovery Document URL. The discovery document will be used to obtain the values of the access token endpoint and the authentication endpoint. This URL should look like https://idp.example.org/.well-known/openid- configuration With v3oidcclientcredentials: OpenID Connect Discovery Document URL. The discovery document will be used to obtain the values of the access token endpoint and the authentication endpoint. This URL should look like https://idp.example.org/.well-known /openid-configuration (Env: OS_DISCOVERY_ENDPOINT) --os-client-id With v3oidcauthcode: OAuth 2.0 Client ID With v3oidcpassword: OAuth 2.0 Client ID With v3oidcclientcredentials: OAuth 2.0 Client ID (Env: OS_CLIENT_ID) --os-project-domain-name With password: Domain name containing project With v3oidcauthcode: Domain name containing project With v3samlpassword: Domain name containing project With v3password: Domain name containing project With v3oidcaccesstoken: Domain name containing project With v3oidcpassword: Domain name containing project With token: Domain name containing project With v3oidcclientcredentials: Domain name containing project With v3tokenlessauth: Domain name containing project With v3token: Domain name containing project With v3totp: Domain name containing project (Env: OS_PROJECT_DOMAIN_NAME) --os-access-key With v3oauth1: OAuth Access Key (Env: OS_ACCESS_KEY) --os-password With password: User's password With v2password: Password to use With v3samlpassword: Password With v3password: User's password With v3oidcpassword: Password With v1password: Password to use (Env: OS_PASSWORD) --os-redirect-uri With v3oidcauthcode: OpenID Connect Redirect URL (Env: OS_REDIRECT_URI) --os-endpoint With admin_token: The endpoint that will always be used (Env: OS_ENDPOINT) --os-url With token_endpoint: Specific service endpoint to use (Env: OS_URL) --os-consumer-secret With v3oauth1: OAuth Consumer Secret (Env: OS_CONSUMER_SECRET) --os-token With v2token: Token With admin_token: The token that will always be used With token: Token to authenticate with With v3token: Token to authenticate with With token_endpoint: Authentication token to use (Env: OS_TOKEN) --os-passcode With v3totp: User's TOTP passcode (Env: OS_PASSCODE) --os-project-id With password: Project ID to scope to With v3oidcauthcode: Project ID to scope to With v3samlpassword: Project ID to scope to With v3password: Project ID to scope to With v3oidcaccesstoken: Project ID to scope to With v3oidcpassword: Project ID to scope to With token: Project ID to scope to With v3oidcclientcredentials: Project ID to scope to With v3tokenlessauth: Project ID to scope to With v3token: Project ID to scope to With v3totp: Project ID to scope to (Env: OS_PROJECT_ID)Commands: access token create Create an access token address scope create Create a new Address Scope address scope delete Delete address scope(s) address scope list List address scopes address scope set Set address scope properties address scope show Display address scope details aggregate add host Add host to aggregate aggregate create Create a new aggregate aggregate delete Delete existing aggregate(s) aggregate list List all aggregates aggregate remove host Remove host from aggregate aggregate set Set aggregate properties aggregate show Display aggregate details aggregate unset Unset aggregate properties availability zone list List availability zones and their status catalog list List services in the service catalog catalog show Display service catalog details command list List recognized commands by group complete print bash completion command compute agent create Create compute agent compute agent delete Delete compute agent(s) compute agent list List compute agents compute agent set Set compute agent properties compute service delete Delete compute service(s) compute service list List compute services compute service set Set compute service properties configuration show Display configuration details consistency group add volume Add volume(s) to consistency group consistency group create Create new consistency group. consistency group delete Delete consistency group(s). consistency group list List consistency groups. consistency group remove volume Remove volume(s) from consistency group consistency group set Set consistency group properties consistency group show Display consistency group details. consistency group snapshot create Create new consistency group snapshot. consistency group snapshot delete Delete consistency group snapshot(s). consistency group snapshot list List consistency group snapshots. consistency group snapshot show Display consistency group snapshot details console log show Show server's console output console url show Show server's remote console URL consumer create Create new consumer consumer delete Delete consumer(s) consumer list List consumers consumer set Set consumer properties consumer show Display consumer details container create Create new container container delete Delete container container list List containers container save Save container contents locally container set Set container properties container show Display container details container unset Unset container properties credential create Create new credential credential delete Delete credential(s) credential list List credentials credential set Set credential properties credential show Display credential details domain create Create new domain domain delete Delete domain(s) domain list List domains domain set Set domain properties domain show Display domain details ec2 credentials create Create EC2 credentials ec2 credentials delete Delete EC2 credentials ec2 credentials list List EC2 credentials ec2 credentials show Display EC2 credentials details endpoint create Create new endpoint endpoint delete Delete endpoint(s) endpoint list List endpoints endpoint set Set endpoint properties endpoint show Display endpoint details extension list List API extensions federation domain list List accessible domains federation project list List accessible projects federation protocol create Create new federation protocol federation protocol delete Delete federation protocol(s) federation protocol list List federation protocols federation protocol set Set federation protocol properties federation protocol show Display federation protocol details firewall group create Create a new firewall group firewall group delete Delete firewall group(s) firewall group list List firewall groups firewall group policy add rule Insert a rule into a given firewall policy firewall group policy create Create a new firewall policy firewall group policy delete Delete firewall policy(s) firewall group policy list List firewall policies firewall group policy remove rule Remove a rule from a given firewall policy firewall group policy set Set firewall policy properties firewall group policy show Display firewall policy details firewall group policy unset Unset firewall policy properties firewall group rule create Create a new firewall rule firewall group rule delete Delete firewall rule(s) firewall group rule list List firewall rules that belong to a given tenant firewall group rule set Set firewall rule properties firewall group rule show Display firewall rule details firewall group rule unset Unset firewall rule properties firewall group set Set firewall group properties firewall group show Display firewall group details firewall group unset Unset firewall group properties flavor create Create new flavor flavor delete Delete flavor(s) flavor list List flavors flavor set Set flavor properties flavor show Display flavor details flavor unset Unset flavor properties floating ip create Create floating IP floating ip delete Delete floating IP(s) floating ip list List floating IP(s) floating ip pool list List pools of floating IP addresses floating ip show Display floating IP details group add user Add user to group group contains user Check user membership in group group create Create new group group delete Delete group(s) group list List groups group remove user Remove user from group group set Set group properties group show Display group details help print detailed help for another command host list List hosts host set Set host properties host show Display host details hypervisor list List hypervisors hypervisor show Display hypervisor details hypervisor stats show Display hypervisor stats details identity provider create Create new identity provider identity provider delete Delete identity provider(s) identity provider list List identity providers identity provider set Set identity provider properties identity provider show Display identity provider details p_w_picpath add project Associate project with p_w_picpath p_w_picpath create Create/upload an p_w_picpath p_w_picpath delete Delete p_w_picpath(s) p_w_picpath list List available p_w_picpaths p_w_picpath remove project Disassociate project with p_w_picpath p_w_picpath save Save an p_w_picpath locally p_w_picpath set Set p_w_picpath properties p_w_picpath show Display p_w_picpath details p_w_picpath unset Unset p_w_picpath tags and properties ip availability list List IP availability for network ip availability show Show network IP availability details keypair create Create new public or private key for server ssh access keypair delete Delete public or private key(s) keypair list List key fingerprints keypair show Display key details limits show Show compute and block storage limits mapping create Create new mapping mapping delete Delete mapping(s) mapping list List mappings mapping set Set mapping properties mapping show Display mapping details module list List module versions network agent delete Delete network agent(s) network agent list List network agents network agent set Set network agent properties network agent show Display network agent details network create Create new network network delete Delete network(s) network list List networks network meter create Create network meter network meter delete Delete network meter network meter list List network meters network meter rule create Create a new meter rule network meter rule delete Delete meter rule(s) network meter rule list List meter rules network meter rule show Display meter rules details network meter show Show network meter network qos policy create Create a QoS policy network qos policy delete Delete Qos Policy(s) network qos policy list List QoS policies network qos policy set Set QoS policy properties network qos policy show Display QoS policy details network qos rule create Create new Network QoS rule network qos rule delete Delete Network QoS rule network qos rule list List Network QoS rules network qos rule set Set Network QoS rule properties network qos rule show Display Network QoS rule details network qos rule type list List QoS rule types network rbac create Create network RBAC policy network rbac delete Delete network RBAC policy(s) network rbac list List network RBAC policies network rbac set Set network RBAC policy properties network rbac show Display network RBAC policy details network segment create Create new network segment network segment delete Delete network segment(s) network segment list List network segments network segment set Set network segment properties network segment show Display network segment details network service provider list List Service Providers network set Set network properties network show Show network details network subport list List all subports for a given network trunk network trunk create Create a network trunk for a given project network trunk delete Delete a given network trunk network trunk list List all network trunks network trunk set Set network trunk properties network trunk show Show information of a given network trunk network trunk unset Unset subports from a given network trunk object create Upload object to container object delete Delete object from container object list List objects object save Save object locally object set Set object properties object show Display object details object store account set Set account properties object store account show Display account details object store account unset Unset account properties object unset Unset object properties policy create Create new policy policy delete Delete policy(s) policy list List policies policy set Set policy properties policy show Display policy details port create Create a new port port delete Delete port(s) port list List ports port set Set port properties port show Display port details port unset Unset port properties project create Create new project project delete Delete project(s) project list List projects project set Set project properties project show Display project details quota set Set quotas for project or class quota show Show quotas for project or class region create Create new region region delete Delete region(s) region list List regions region set Set region properties region show Display region details request token authorize Authorize a request token request token create Create a request token role add Adds a role assignment to a user or group on a domain or project role assignment list List role assignments role create Create new role role delete Delete role(s) role list List roles role remove Removes a role assignment from domain/project : user/group role set Set role properties role show Display role details router add port Add a port to a router router add subnet Add a subnet to a router router create Create a new router router delete Delete router(s) router list List routers router remove port Remove a port from a router router remove subnet Remove a subnet from a router router set Set router properties router show Display router details router unset Unset router properties security group create Create a new security group security group delete Delete security group(s) security group list List security groups security group rule create Create a new security group rule security group rule delete Delete security group rule(s) security group rule list List security group rules security group rule show Display security group rule details security group set Set security group properties security group show Display security group details server add fixed ip Add fixed IP address to server server add floating ip Add floating IP address to server server add security group Add security group to server server add volume Add volume to server server backup create Create a server backup p_w_picpath server create Create a new server server delete Delete server(s) server dump create Create a dump file in server(s) server group create Create a new server group. server group delete Delete existing server group(s). server group list List all server groups. server group show Display server group details. server p_w_picpath create Create a new server disk p_w_picpath from an existing server server list List servers server lock Lock server(s). A non-admin user will not be able to execute actions server migrate Migrate server to different host server pause Pause server(s) server reboot Perform a hard or soft server reboot server rebuild Rebuild server server remove fixed ip Remove fixed IP address from server server remove floating ip Remove floating IP address from server server remove security group Remove security group from server server remove volume Remove volume from server server rescue Put server in rescue mode server resize Scale server to a new flavor server restore Restore server(s) server resume Resume server(s) server set Set server properties server shelve Shelve server(s) server show Show server details server ssh SSH to server server start Start server(s). server stop Stop server(s). server suspend Suspend server(s) server unlock Unlock server(s) server unpause Unpause server(s) server unrescue Restore server from rescue mode server unset Unset server properties server unshelve Unshelve server(s) service create Create new service service delete Delete service(s) service list List services service provider create Create new service provider service provider delete Delete service provider(s) service provider list List service providers service provider set Set service provider properties service provider show Display service provider details service set Set service properties service show Display service details snapshot create Create new snapshot snapshot delete Delete volume snapshot(s) snapshot list List snapshots snapshot set Set snapshot properties snapshot show Display snapshot details snapshot unset Unset snapshot properties subnet create Create a subnet subnet delete Delete subnet(s) subnet list List subnets subnet pool create Create subnet pool subnet pool delete Delete subnet pool(s) subnet pool list List subnet pools subnet pool set Set subnet pool properties subnet pool show Display subnet pool details subnet pool unset Unset subnet pool properties subnet set Set subnet properties subnet show Display subnet details subnet unset Unset subnet properties token issue Issue new token token revoke Revoke existing token trust create Create new trust trust delete Delete trust(s) trust list List trusts trust show Display trust details usage list List resource usage per project usage show Show resource usage for a single project user create Create new user user delete Delete user(s) user list List users user password set Change current user password user set Set user properties user show Display user details volume backup create Create new volume backup volume backup delete Delete volume backup(s) volume backup list List volume backups volume backup restore Restore volume backup volume backup set Set volume backup properties volume backup show Display volume backup details volume create Create new volume volume delete Delete volume(s) volume host set Set volume host properties volume list List volumes volume migrate Migrate volume to a new host volume qos associate Associate a QoS specification to a volume type volume qos create Create new QoS specification volume qos delete Delete QoS specification volume qos disassociate Disassociate a QoS specification from a volume type volume qos list List QoS specifications volume qos set Set QoS specification properties volume qos show Display QoS specification details volume qos unset Unset QoS specification properties volume service list List service command volume service set Set volume service properties volume set Set volume properties volume show Display volume details volume snapshot create Create new volume snapshot volume snapshot delete Delete volume snapshot(s) volume snapshot list List volume snapshots volume snapshot set Set volume snapshot properties volume snapshot show Display volume snapshot details volume snapshot unset Unset volume snapshot properties volume transfer request accept Accept volume transfer request. volume transfer request create Create volume transfer request. volume transfer request delete Delete volume transfer request(s). volume transfer request list Lists all volume transfer requests. volume transfer request show Show volume transfer request details. volume type create Create new volume type volume type delete Delete volume type(s) volume type list List volume types volume type set Set volume type properties volume type show Display volume type details volume type unset Unset volume type properties volume unset Unset volume properties