Skip to content

Creating and Managing EC2 credentials

Overview

For using the OpenStack S3 API:s you need to generate an additional set of credentials. These can then be used to store data in the Swift Object store for applications that don’t have native Swift support but do support the S3 interfaces.

Note

The openstack CLI will need to be setup to interact with the FlexiHPC system. Please read Setting up your CLI environment to interact with FlexiHPC to get started.

Create and fetch credentials using the CLI

Running the below command will generate EC2 credentials

openstack ec2 credentials create

With the following ouput

+------------+----------------------------------------------------------------------------------------------------------------+
| Field      | Value                                                                                                          |
+------------+----------------------------------------------------------------------------------------------------------------+
| access     | <USER_ACCESS_TOKEN>                                                                                            |
| links      | {'self': 'https://keystone.akl-1.cloud.nesi.org.nz/v3/users/<USER_ID>/credentials/OS-EC2/<USER_ACCESS_TOKEN>'} |
| project_id | <PROJECT_ID>                                                                                                   |
| secret     | <USERS_SECRET_TOKEN>                                                                                           |
| trust_id   | None                                                                                                           |
| user_id    | <USER_ID>                                                                                                      |
+------------+----------------------------------------------------------------------------------------------------------------+

Note the access field and the secret field. These are the 2 fields required to interact with the s3 protocol.

The below command will fetch all EC2 credentails associated with the user

openstack ec2 credentials list
+---------------------+----------------------+--------------+-----------+
| Access              | Secret               | Project ID   | User ID   |
+---------------------+----------------------+--------------+-----------+
| <USER_ACCESS_TOKEN> | <USERS_SECRET_TOKEN> | <PROJECT_ID> | <USER_ID> |
+---------------------+----------------------+--------------+-----------+

Delete credentials using the CLI

Use the access key to refer to the credentials you wish to delete:

openstack ec2 credentials delete USER_ACCESS_TOKEN