docs
// Execution Management (EEM)

OpenStack Tools

EEM tools for OpenStack: compute instances, networks, volumes, images, keypairs, routers, floating IPs, and Heat orchestration stacks. Identifiers use snake_case (openstack_server_list) and route through the standard approval flow on destructive verbs.

Tools

Compute

  • openstack_server_list, List servers in a project
  • openstack_server_show, Show server details
  • openstack_server_create, Launch a new server
  • openstack_server_delete, Delete a server
  • openstack_server_start, Start a stopped server
  • openstack_server_stop, Stop a running server
  • openstack_server_reboot, Reboot a server
  • openstack_server_resize, Resize a server to a new flavor
  • openstack_flavor_list, List available flavors
  • openstack_flavor_show, Show flavor details
  • openstack_keypair_list, List SSH keypairs
  • openstack_keypair_create, Create an SSH keypair
  • openstack_keypair_delete, Delete an SSH keypair

Networking

  • openstack_network_list, List networks
  • openstack_subnet_list, List subnets
  • openstack_security_group_list, List security groups
  • openstack_router_list, List routers
  • openstack_router_create, Create a router
  • openstack_router_delete, Delete a router
  • openstack_floatingip_create, Allocate a floating IP
  • openstack_floatingip_delete, Release a floating IP

Block Storage

  • openstack_volume_list, List volumes
  • openstack_volume_create, Create a volume
  • openstack_volume_delete, Delete a volume
  • openstack_volume_attach, Attach a volume to a server
  • openstack_volume_extend, Extend a volume's size
  • openstack_volume_snapshot_create, Create a volume snapshot
  • openstack_volume_snapshot_list, List volume snapshots

Images

  • openstack_image_list, List images
  • openstack_image_upload, Upload a new image
  • openstack_image_delete, Delete an image

Orchestration (Heat)

  • openstack_stack_list, List Heat stacks
  • openstack_stack_show, Show a Heat stack
  • openstack_stack_create, Create a Heat stack
  • openstack_stack_delete, Delete a Heat stack

Credential Setup

OpenStack tools take the clouds.yaml named by the workspace's credentials_ref, a file on the agent host at credentials_dir/<workspace>/<credentials_ref> holding exactly one cloud under clouds. That cloud's auth block decides the project every call acts in. An application credential is a good fit: create one in the project and write its auth URL, ID and secret into the cloud's auth block with auth_type: v3applicationcredential. The credential never leaves the agent host.

The client reads that file and no other clouds.yaml or secure.yaml. A file that is missing, empty, a symlink, readable by group or other, or not holding exactly one cloud refuses the call before the client runs. A workspace without credentials_ref runs these tools on whatever the agent's own account reaches; run one agent per credential boundary, or bind each workspace. See Workspace credentials.

Examples

Once credentials are configured, the EEM agent can execute OpenStack tools on behalf of a workspace. See the EEM Overview for the full execution lifecycle.