++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=c0dae56cc25d4c4ba26bb6a7625caf23 + openstack domain show c0dae56cc25d4c4ba26bb6a7625caf23 +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | id | c0dae56cc25d4c4ba26bb6a7625caf23 | | name | magnum | | enabled | True | | description | Service Domain for RegionOne/magnum | | options | {} | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=c0dae56cc25d4c4ba26bb6a7625caf23 --description 'Service User for RegionOne/magnum' --password=4GSoZbPpGpp9YKOOWJPe32NAleqW62ge magnum-domain-RegionOne + SERVICE_OS_USERID=00c7fc351b3743cc9d8d39bc83e57ce0 + openstack user set --password=4GSoZbPpGpp9YKOOWJPe32NAleqW62ge 00c7fc351b3743cc9d8d39bc83e57ce0 + openstack user show 00c7fc351b3743cc9d8d39bc83e57ce0 +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | c0dae56cc25d4c4ba26bb6a7625caf23 | | email | None | | enabled | True | | id | 00c7fc351b3743cc9d8d39bc83e57ce0 | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | | options | {} | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=ea3b8ab142014ceeb7a69c0791d70aef + openstack role add --domain=c0dae56cc25d4c4ba26bb6a7625caf23 --user=00c7fc351b3743cc9d8d39bc83e57ce0 --user-domain=c0dae56cc25d4c4ba26bb6a7625caf23 ea3b8ab142014ceeb7a69c0791d70aef + openstack role assignment list --role=ea3b8ab142014ceeb7a69c0791d70aef --user-domain=c0dae56cc25d4c4ba26bb6a7625caf23 --user=00c7fc351b3743cc9d8d39bc83e57ce0 +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | ea3b8ab142014ceeb7a69c0791d70aef | 00c7fc351b3743cc9d8d39bc83e57ce0 | | | c0dae56cc25d4c4ba26bb6a7625caf23 | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+