This document outlines the security measures and best practices for maintaining a secure OpenStack environment using the CLI.

Application Credentials

Application Credentials provide a more secure alternative to using your OpenStack username and password for authenticating applications or scripts.

Creating Application Credentials

To create a new application credential:

openstack application credential create <name>

You can also specify roles and expiration:

openstack application credential create --role <role> --expiration <expiration-date> <name>

Example:

openstack application credential create --role member --expiration 2025-12-31T23:59:59 app-cred-01

Important: Save the secret returned by this command immediately. It will not be shown again.

Listing Application Credentials

openstack application credential list

Deleting Application Credentials

To revoke a credential:

openstack application credential delete <name-or-id>

Security Groups

Use Security Groups to control inbound and outbound traffic to your instances.

For more details, see the Security Groups guide.