OpenStack API Access

Create restricted, expiring Keystone application credentials for Terraform, the openstack CLI, OCCM, and Cinder CSI, with a ready clouds.yaml and a guide for each tool.

Create account Contact sales

View pricing Read the docs

ICT Cloud console · illustrative data

Application credentials for Terraform, the openstack CLI, and Kubernetes.

Your tools, unchanged

Terraform, the openstack CLI, OCCM, and Cinder CSI work with the credentials you create here.

Expiring by design

Every credential expires: after 90 days by default, or any period from 1 to 365 days.

Rotation without downtime

A rotated credential overlaps with the old one so you can update CI and cluster secrets in time.

Features

Application credentials

Restricted and expiring, bound to one project; confirmed with your authenticator app.

Limits per project

Up to 20 active credentials per user or service account, and 50 per project.

clouds.yaml and openrc

Generated in your browser from the credential; the secret is shown once.

Rotate and revoke

Rotate with an overlap window; a revoked credential stops authenticating at once.

Organization switch

Allow or disable OpenStack credentials for the whole organization.

Built-in guide

Terraform, CLI, Kubernetes (OCCM and Cinder CSI), limits, and what is not offered.

Specifications

Credential type	Keystone application credential, restricted and expiring
Scope	One project
Lifetime	1–365 days, 90 by default
Tools	Terraform, openstack CLI, OCCM, Cinder CSI
Active credentials	Up to 20 per user or service account, 50 per project
Rotation	Old secret keeps working for up to 7 days

FAQ

Do I need an OpenStack credential to use the console?

No. The console and the portal API never need one. Only tools that talk to OpenStack directly do.

Which Terraform resources are supported?

The console’s built-in guide lists each resource type and whether it is supported.

Start building on ICT Cloud.

Creating an account is free. Resources are billed per second, with a 60-second minimum.