
Contains .inc files which have all the contents of the .rst files but are grouped together for easier editing. Contains parameters.yaml, which has all parameters in one file. Contains request and response samples (JSON and XML) that are pointed to from the .inc files. Change-Id: I42d5451300f95774a3ec4df66bc95cb36795844d
88 lines
1.8 KiB
ReStructuredText
88 lines
1.8 KiB
ReStructuredText
.. -*- rst -*-
|
|
|
|
==========================
|
|
Trust extension (OS-TRUST)
|
|
==========================
|
|
|
|
Creates a trust.
|
|
|
|
A trust is an OpenStack Identity extension that enables delegation
|
|
and, optionally, impersonation through ``keystone``. A trust
|
|
extension defines a relationship between a trustor and trustee. A
|
|
trustor is the user who delegates a limited set of their own rights
|
|
to another user, known as the trustee, for a limited time.
|
|
|
|
The trust can eventually enable the trustee to impersonate the
|
|
trustor. For security reasons, some safety measures are added. For
|
|
example, if a trustor loses a given role, the API automatically
|
|
revokes any trusts and the related tokens that the user issued with
|
|
that role.
|
|
|
|
For more information, see `Use trusts <http://docs.openstack.org
|
|
/admin-guide/keystone_use_trusts.html>`_.
|
|
|
|
|
|
Create trust
|
|
============
|
|
|
|
.. rest_method:: POST /v3/OS-TRUST/trusts
|
|
|
|
Creates a trust.
|
|
|
|
Error response codes:201,413,415,405,404,403,401,400,503,409,
|
|
|
|
|
|
Request
|
|
-------
|
|
|
|
.. rest_parameters:: parameters.yaml
|
|
|
|
- impersonation: impersonation
|
|
- trust: trust
|
|
- trustor_user_id: trustor_user_id
|
|
- name: name
|
|
- roles: roles
|
|
- oauth_expires_at: oauth_expires_at
|
|
- remaining_uses: remaining_uses
|
|
- trustee_user_id: trustee_user_id
|
|
- project_id: project_id
|
|
|
|
Request Example
|
|
---------------
|
|
|
|
.. literalinclude:: ../samples/OS-TRUST/trust-create-request.json
|
|
:language: javascript
|
|
|
|
|
|
|
|
Response Parameters
|
|
-------------------
|
|
|
|
.. rest_parameters:: parameters.yaml
|
|
|
|
- impersonation: impersonation
|
|
- roles_links: roles_links
|
|
- trust: trust
|
|
- trustor_user_id: trustor_user_id
|
|
- name: name
|
|
- links: links
|
|
- oauth_expires_at: oauth_expires_at
|
|
- remaining_uses: remaining_uses
|
|
- trustee_user_id: trustee_user_id
|
|
- roles: roles
|
|
- project_id: project_id
|
|
- id: id
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|