Resources

Reverse-specs

The sourced specifications of the upstream repositories, produced by the generate-reverse-spec skill: endpoints, errors, interactions, scenarios, asynchronous processing, history and rewrite pack.

Services

barbican

stable-2026.2 · 9 files

Barbican is OpenStack's key manager. Projects store secrets (opaque data, passphrases, symmetric keys, public/private keys, certificates), group them in containers (generic, RSA, certificate), and ask Barbican to generate keys through asynchronous…

Services

cinder

stable-2026.2 · 8 files

Cinder provides block volumes to instances: it creates, snapshots, backs up, extends, retypes, migrates, transfers and deletes volumes, and gives Nova the connection information to attach them. It does not move data on the request path itself: -…

Services

cloudkitty

stable-2026.2 · 9 files

CloudKitty is OpenStack's rating service: it turns usage into prices. It does not meter anything itself and it does not invoice:

Services

designate

stable-2026.2 · 9 files

Designate is OpenStack's DNS-as-a-Service. Projects create zones and recordsets through a REST API; Designate stores them in its database and publishes them on the DNS servers of a pool. The DNS servers are secondaries: a driver per pool target only…

Services

ec2-api

17.0.0 · 9 files

ec2-api is a translation layer: it serves the AWS EC2 Query API (Action=RunInstances&Version=…, XML responses, AWS error codes) and turns each action into calls to Nova, Neutron, Cinder and Glance made with the caller's own Keystone token. Requests…

Services

glance

stable-2026.2 · 8 files

Glance is OpenStack's image service. It keeps the metadata of virtual machine images (formats, sizes, checksums, visibility, sharing, tags, properties) in a SQL database and delegates the data to pluggable stores through the separate glance_store…

Services

heat

stable-2026.2 · 9 files

Heat turns declarative templates (HOT YAML, or AWS CloudFormation JSON/YAML) into running OpenStack resources and keeps them in line with the template over updates. Two stateless API processes translate HTTP into RPC calls to heat-engine, which owns all the…

Services

ironic

stable-2026.2 · 9 files

Ironic provisions physical servers. Operators enrol machines with their BMC credentials; Ironic verifies, inspects and cleans them, and then deploys an image on request — usually from Nova, which schedules bare metal flavors on nodes through Placement and…

Services

keystone

stable-2026.2 · 9 files

Keystone is OpenStack's identity and authorisation service: - it authenticates users, services and federated identities; - it issues tokens that are not stored (Fernet), which the other services have validated by keystonemiddleware; - it holds the…

Tests

keystone-tempest-plugin

master · 9 files

keystone-tempest-plugin is Keystone's black-box test suite: it only drives Keystone through its public API. - Its RBAC tests run the same scenario under 11 personas (system, domain or project scope; admin, manager, member or reader role). For each…

Libraries

keystoneauth

stable-2026.2 · 9 files

keystoneauth is the HTTP and authentication library of OpenStack: - it obtains and renews tokens (password, token, application credential, MFA, federation, OAuth…); - it finds endpoints in the catalog and discovers versions and microversions; - it sends…

Libraries

keystonemiddleware

stable-2026.2 · 9 files

Each OpenStack service (Nova, Placement, Neutron, Cinder…) puts auth_token in front of its API: 1. it validates the token of each request against Keystone, keeping the result in cache for 300 s; 2. it rejects the request with 401, or lets it through…

Services

magnum

stable-2026.2 · 10 files

Magnum is OpenStack's "Container Infrastructure Management" service (container-infra): it creates and manages Kubernetes clusters for projects. It has two processes. magnum-api (pecan + WSME, port 9511) validates requests and either answers from the…

Services

manila

stable-2026.2 · 9 files

Manila is OpenStack's Shared File Systems service: it provisions file shares (NFS, CIFS, CephFS…) on storage back ends, controls which clients may mount them (access rules), and manages snapshots, replicas, share groups, transfers, backups and quotas.…

Services

masakari

stable-2026.2 · 8 files

Masakari provides instance high availability for Nova. Detectors (masakari-monitors, or any client) report failures as notifications of three types: a compute host down, an instance crashed, or a process (nova-compute) died. masakari-api records them…

Services

neutron

stable-2026.2 · 8 files

Neutron is OpenStack's networking service: it stores the logical network model (networks, subnets, ports, routers, floating IPs, security groups, QoS…) in MariaDB and exposes it through the Networking API v2.0. With ML2/OVN, it does not program the data…

Services

neutron-fwaas

stable-2026.2 · 8 files

neutron-fwaas adds Firewall-as-a-Service v2 to Neutron: firewall rules (protocol, addresses, ports, allow/deny/reject), ordered into policies, applied through firewall groups to router interface ports (L3) or VM ports (L2).

Services

neutron-vpnaas

stable-2026.2 · 8 files

neutron-vpnaas adds site-to-site IPsec VPN (pre-shared keys) to Neutron. It is not a separate API service: it is a Neutron service plugin loaded by neutron-server, which exposes five REST resources under /v2.0/vpn (IKE policies, IPsec policies, endpoint…

Services

nova

stable-2026.2 · 17 files

Nova is the OpenStack compute service: it turns API requests for servers into virtual machines on hypervisor hosts. nova-api validates and records requests in the API database and hands them over RPC to nova-conductor, which asks nova-scheduler for…

Services

octavia

stable-2026.2 · 8 files

Octavia's API is a load-balancing control plane with almost no behaviour of its own: it validates a request, records the desired objects in SQL with a PENDING_* status while holding a row lock on the load balancer, and calls a provider driver…

Clients

osc-placement

stable-2026.2 · 9 files

osc-placement is the plugin of the openstack command line that drives Placement: resource providers, inventories, allocations, resource classes, traits, aggregates, usages and allocation candidates. Each command: 1. checks the microversion locally; 2. sends…

Libraries

oslo.cache

stable-2026.2 · 9 files

oslo.cache turns the [cache] section of an OpenStack service into a dogpile.cache region: - it chooses the backend (null by default, memcached, Redis, etcd…); - it hashes every key with SHA-1; - it gives services a memoization decorator, switched and…

Services

ovn-bgp-agent

stable-2026.2 · 8 files

ovn-bgp-agent runs on every OpenStack node that uses OVN and makes the IPs that live on that node reachable through BGP: VMs on provider networks, floating IPs, router gateways and, optionally, tenant subnets and load-balancer VIPs. It has no API and no…

Services

ovn-octavia-provider

stable-2026.2 · 8 files

ovn-octavia-provider lets Octavia create load balancers without amphora VMs: each Octavia load balancer becomes one or more rows of the OVN Northbound Load_Balancer table, which ovn-northd and ovn-controller turn into distributed DNAT flows on every…

Services

placement

stable-2026.2 · 9 files

Placement is the central registry of consumable resources of an OpenStack cloud. It acts as the ledger of capacities and reservations:

Clients

python-barbicanclient

stable-2026.2 · 8 files

python-barbicanclient provides three things: 1. a Python library, barbicanclient.client.Client (barbicanclient/client.py:150), which castellan and others use; 2. a plugin of the openstack command with 23 commands on secrets, consumers, orders,…

Clients

python-designateclient

stable-2026.2 · 8 files

The package has two layers. designateclient.v2.client.Client is a Python library with one controller per resource, on top of a keystoneauth adapter that translates HTTP statuses into exceptions. designateclient.v2.cli holds 60 command classes for…

Clients

python-heatclient

stable-2026.2 · 8 files

python-heatclient has three layers: 1. OSC plugin (heatclient/osc/): 49 commands of openstack, loaded through entry points (pyproject.toml:42-93). 2. Python API (heatclient/v1/, heatclient/common/): one manager per resource, on top of a…

Clients

python-ironicclient

stable-2026.2 · 8 files

python-ironicclient is the client of Ironic, the OpenStack Bare Metal service. It gives three ways in:

Clients

python-manilaclient

stable-2026.2 · 8 files

python-manilaclient is the plugin that gives the openstack CLI its share commands, and a Python library for Manila, the Shared File System service. Each command: 1. resolves its arguments, often by listing a collection to turn a name into an ID; 2. checks…

Clients

python-masakariclient

stable-2026.2 · 8 files

python-masakariclient is a thin plugin of the openstack command. It adds 15 commands that drive Masakari (instance high availability): failover segments, hosts in a segment, notifications, and VM moves of a notification. It holds no REST code: every call…

Clients

python-neutronclient

stable-2026.2 · 8 files

The package now provides three different things:

Clients

python-octaviaclient

stable-2026.2 · 8 files

python-octaviaclient is a plugin of the openstack command. It adds 82 loadbalancer … commands that drive the Octavia REST API. Each invocation is one short-lived process: 1. python-openstackclient loads the plugin through entry points…

Clients

python-openstackclient

stable-2026.2 · 8 files

python-openstackclient (OSC) provides the single openstack command. It runs in one short-lived process per invocation: 1. it parses the global options and reads clouds.yaml and OS_* variables; 2. it loads commands from Python entry points; 3. it…

Services

skyline-apiserver

stable-2026.2 · 8 files

skyline-apiserver is the back end of the Skyline dashboard (skyline-console). It is not the data path for most of the UI: the console talks to Nova, Neutron, Cinder, Glance… directly, through an nginx reverse proxy generated from the Keystone catalog…

Services

skyline-console

stable-2026.2 · 8 files

skyline-console is the React 16 / MobX / Ant Design web UI of OpenStack Skyline. It is a pure client: no server process, no database, no bus. It is built with webpack into static files (skyline_console/static/) and shipped as a Python package.…

Services

swift

stable-2026.2 · 8 files

Swift is OpenStack's object store. Clients store objects in containers inside accounts (one per Keystone project, AUTH_<project_id>) through a stateless proxy. The proxy finds the storage nodes of every account, container and object with rings (a…

Services

zun

stable-2026.2 · 8 files

Zun is the OpenStack Containers service: a REST API that runs application containers directly on compute nodes, without a virtual machine and without a user-managed cluster (README.rst:12, doc/source/install/overview.rst:5). A user asks for an image,…