Comment 9 for bug 1460492

Discussion from IRC:
2015-06-30T19:40:38 <anhhuynx> jamielennox: Would you please advise me on how to start with this? It appears that I have been going about this the wrong way, and I have no idea how to even use the v3 keystone API. If you don't mind can you point me to some reading materials?
2015-06-30T19:43:58 <jamielennox> anhhuynx: hmm reading material for keystone v3...
2015-06-30T19:46:13 <jamielennox> anhhuynx: so i guess there are multiple ways to interact and it depends what you are looking for
2015-06-30T19:46:55 <jamielennox> anhhuynx: so keystone provides a REST API for how to interact with it which is defined https://github.com/openstack/keystone-specs/blob/master/api/v3/identity-api-v3.rst
2015-06-30T19:46:56 <dramakri> anhhuynx: some simple v3 api examples from ayoung's blog - http://adam.younglogic.com/2013/09/keystone-v3-api-examples/
2015-06-30T19:47:16 <jamielennox> anhhuynx: to communicate with that you can use curl or whatever you like that talks http
2015-06-30T19:47:28 <anhhuynx> Thank you very much!
2015-06-30T19:47:52 <jamielennox> we provide keystoneclient which is a python library that provides a way to talk python and have the library make calls for you
2015-06-30T19:48:15 <jamielennox> documentation is a bit scarse but: http://docs.openstack.org/developer/python-keystoneclient/using-api-v3.html
2015-06-30T19:48:53 <jamielennox> then openstack client is an application that you can call from the command line which consumes keystoneclient internally
2015-06-30T19:50:05 <jamielennox> so i guess it depends how you want to use it
2015-06-30T19:51:18 <jamielennox> anhhuynx: regarding how you go about implementing it, first you would need to update the identity-api-v3 document above to add a new type parameter to the list credentials
2015-06-30T19:51:59 <jamielennox> then you need to add it to keystone itself so that when type= is passed it filters the results
2015-06-30T19:52:47 <jamielennox> then add it to keystoneclient and maybe openstackclient
2015-06-30T19:54:16 <anhhuynx> jamielennox: Isn't the identity-api-v3 document above just documentation?
2015-06-30T19:54:36 <anhhuynx> Would updating it change anything?
2015-06-30T19:55:05 <jamielennox> anhhuynx: we consider that doc to be the complete list of what keystone can do and it's where we nitpick over the high level change
2015-06-30T19:55:35 <jamielennox> so no, changing it won't actually do anything but people won't let you merge the keystone review until the spec change has been approved
2015-06-30T19:55:54 <anhhuynx> Ok, so if I want to add any functionality I better be documenting it?
2015-06-30T19:56:10 <jamielennox> in this case it's really unlikely anyone will say no to the change so you can absolutely work on all of this in parallel
2015-06-30T19:56:40 <jamielennox> yep, if it's part of the public API it has to exist in that doc