Using OpenStack Key Manager

Before working with the Key Manager service, you’ll need to create a connection to your OpenStack cloud by following the Connect user guide. This will provide you with the conn variable used in the examples below.

Note

Some interactions with the Key Manager service differ from that of other services in that resources do not have a proper id parameter, which is necessary to make some calls. Instead, resources have a separately named id attribute, e.g., the Secret resource has secret_id.

The examples below outline when to pass in those id values.

Create a Secret

The Key Manager service allows you to create new secrets by passing the attributes of the Secret to the create_secret() method.

List Secrets

Once you have stored some secrets, they are available for you to list via the secrets() method. This method returns a generator, which yields each Secret.

The secrets() method can also make more advanced queries to limit the secrets that are returned.

Get Secret Payload

Once you have received a Secret, you can obtain the payload for it by passing the secret’s id value to the secrets() method. Use the secret_id attribute when making this request.

Find Secret

To find a secret by name or ID, use the find_secret() method. This method can search for a Secret by either its name or ID, making it flexible when you don’t have the exact secret ID.

Delete Secret

To delete a secret, use the delete_secret() method. The secret can be identified by its ID or by using find_secret() to locate it by name first.