summaryrefslogtreecommitdiff
path: root/doc/source/admin/manage-trusts.rst
blob: 03337e3ea7f521a4fc86ffb7fdbeaaa33a92728b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
===============
Managing trusts
===============

A trust is an OpenStack Identity extension that enables delegation and,
optionally, impersonation through ``keystone``. See the `user guide on using
trusts`_.

.. _user guide on using trusts: ../user/trusts.html

Removing Expired Trusts
===========================================================

In the SQL trust stores expired and soft deleted trusts, that are not
automatically removed. These trusts can be removed with::

    $ keystone-manage trust_flush [options]

 OPTIONS (optional):

        --project-id <string>:
                    To purge trusts of given project-id.
        --trustor-user-id <string>:
                    To purge trusts of given trustor-id.
        --trustee-user-id <string>:
                    To purge trusts of given trustee-id.
        --date <string>:
                    To purge trusts older than date. If no date is supplied
                    keystone-manage will use the system clock time at runtime.