++ openstack project show -f value -c id admin + OS_PROJECT_ID=a1cff47ef41f402488847c07d60e93a8 ++ openstack user show -f value -c id admin-RegionOne + OS_USER_ID=99cfacf7e4cd42b79c5c42dd0d6c01a2 ++ openstack user show -f value -c id --domain service heat-trustee-RegionOne + SERVICE_OS_TRUSTEE_ID=364585103f4d4b5aa5545f95f8872f2f + openstack trust list -f value -c 'Project ID' -c 'Trustee User ID' -c 'Trustor User ID' + grep '^a1cff47ef41f402488847c07d60e93a8 364585103f4d4b5aa5545f95f8872f2f 99cfacf7e4cd42b79c5c42dd0d6c01a2$' + '[' -z '' ']' + readarray -t roles ++ openstack role assignment list -f value -c Role --user=admin-RegionOne --project=a1cff47ef41f402488847c07d60e93a8 ++ openstack trust create -f value -c id --project=admin --role=43038aa09c554e5db4498e8da1674b33 --trustee-domain=service admin-RegionOne heat-trustee-RegionOne + SERVICE_OS_TRUST_ID=ca748cadf3084f7d9e31f1e838aa2e54 + openstack trust show ca748cadf3084f7d9e31f1e838aa2e54 +----------------------+----------------------------------+ | Field | Value | +----------------------+----------------------------------+ | deleted_at | None | | expires_at | None | | id | ca748cadf3084f7d9e31f1e838aa2e54 | | impersonation | False | | project_id | a1cff47ef41f402488847c07d60e93a8 | | redelegated_trust_id | None | | redelegation_count | 0 | | remaining_uses | None | | roles | admin | | trustee_user_id | 364585103f4d4b5aa5545f95f8872f2f | | trustor_user_id | 99cfacf7e4cd42b79c5c42dd0d6c01a2 | +----------------------+----------------------------------+