Managing trusts¶
A trust is an OpenStack Identity extension that enables delegation and,
optionally, impersonation through keystone. See the user
guide on using trusts.
Removing Expired Trusts¶
In the SQL trust stores expired and soft deleted trusts, that are not automatically removed. These trusts can be removed with:
$ keystone-manage trust_flush [options]
OPTIONS (optional):
--project-id <string>:
To purge trusts of given project-id.
--trustor-user-id <string>:
To purge trusts of given trustor-id.
--trustee-user-id <string>:
To purge trusts of given trustee-id.
--date <string>:
To purge trusts older than date. If no date is supplied
keystone-manage will use the system clock time at runtime.
Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.