Preview — pending review
This reference is generated from the platform API contract and is still under review. Operations, fields, and descriptions can change before publication.
Get one OpenStack API credential (no secret)
One credential's metadata. Visibility as for the list; an invisible or unknown id is 404.
bearerTokenAuthorizationBearer <token>An API token (pc_live_…) or a service-account key (sak_live_…), created in Identity & Access Management and sent as Authorization: Bearer <token>. Requests are rate limited per credential and per tenant: every response carries X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset, and a refused request gets 429 RATE_LIMITED with Retry-After.
scopeId*stringOpaque ownership+authorization scope resolving to tenant + subscription + project.
credentialId*stringIdentifier of the credential.
The credential (secret omitted).
application/json- response
An OpenStack application credential minted by the platform (the secret is never included).
id*stringname*stringprojectId*stringThe portal project (scope) id.
owner*Who the credential authenticates as (a member, or a service account).
profile*OpenStackCredentialProfilefull = Keystone member + load-balancer_member; readonly = reader + load-balancer_observer.
Never more than the owner's projected roles on the project.
"full""readonly"roles*array<string>The Keystone roles the credential carries.
status*OpenStackCredentialStatusLifecycle of an OpenStack API credential.
"active""revoked""expired"applicationCredentialId?|The Keystone application credential id (not a secret).
expiresAt*stringdate-timecreatedAt*stringdate-timecreatedBy*stringlastUsedAt?|date-timerevokedAt?|date-timerevokeReason?|nullrotatedFromId?string|nullreplacedById?string|nulldeleteAfter?|End of a rotation overlap window (the old credential is deleted then).
date-timecurl -X GET "https://example.com/scopes/string/iam/openstack-credentials/string"{ "id": "string", "name": "string", "projectId": "string", "owner": { "kind": "user", "id": "string" }, "profile": "full", "roles": [ "string" ], "status": "active", "applicationCredentialId": "string", "expiresAt": "2019-08-24T14:15:22Z", "createdAt": "2019-08-24T14:15:22Z", "createdBy": "string", "lastUsedAt": "2019-08-24T14:15:22Z", "revokedAt": "2019-08-24T14:15:22Z", "revokeReason": "user", "rotatedFromId": "string", "replacedById": "string", "deleteAfter": "2019-08-24T14:15:22Z"}