OpenStack-compatible tools
Use the openstack CLI, Terraform, and Kubernetes cloud integrations with your projects through the OpenStack APIs and an application credential.
Tools that speak the OpenStack APIs work with your projects: the openstack CLI, Terraform with its OpenStack provider, and the OpenStack cloud controller manager (OCCM) and Cinder CSI driver in Kubernetes. They authenticate with an OpenStack application credential, which you create in Identity & AccessOpenStack API access.
An application credential belongs to one project. You can create one only in a signed-in console session, with a fresh code from your authenticator app; API tokens and service account keys can't create them. See Step-up verification.
API token or application credential?
API tokens, which start with pc_live_, call the platform's REST API and don't work with OpenStack tools. Application credentials work with OpenStack tools and don't work with the REST API.
What is OpenStack API Access?
How application credentials work, and which tools they serve.
Create an application credential
Create a credential for yourself or a service account, and download ready-made configuration files.
Use the openstack CLI
Run openstack commands against your project.
Use Terraform
Manage your project's resources with the Terraform OpenStack provider.
Use OCCM and Cinder CSI in Kubernetes
Connect a Kubernetes cluster that runs on your instances to load balancers and volumes.
Rotate and revoke credentials
Replace a credential without downtime, or revoke it at once.
OpenStack API limits
How many credentials you can have, how long they last, and how long a rotated credential keeps working.
OpenStack API Access FAQ
Answers to common questions.