$ keystone -h |grep tenant
[--os-tenant-name <auth-tenant-name>]
[--os-tenant-id <tenant-id>] [--os-auth-url <auth-url>]
Create EC2-compatible credentials for user per tenant.
tenant-create Create new tenant.
tenant-delete Delete tenant.
tenant-get Display tenant details.
tenant-list List all tenants.
tenant-update Update tenant name, description, enabled status.
bootstrap Grants a new role to a new user on a new tenant, after
--os-tenant-name <auth-tenant-name>
--os-tenant-id <tenant-id>
keystone操作需要admin权限