++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=11149a95c187415397f2702046e4f5d7 + openstack domain show 11149a95c187415397f2702046e4f5d7 +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | id | 11149a95c187415397f2702046e4f5d7 | | name | magnum | | enabled | True | | description | Service Domain for RegionOne/magnum | | options | {} | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=11149a95c187415397f2702046e4f5d7 --description 'Service User for RegionOne/magnum' --password=BuESBDYCYAJtcmFVqqjjRn2s7xlHHqQy magnum-domain-RegionOne + SERVICE_OS_USERID=ed4bf689c0c04396b12c364e9aa5690a + openstack user set --password=BuESBDYCYAJtcmFVqqjjRn2s7xlHHqQy ed4bf689c0c04396b12c364e9aa5690a + openstack user show ed4bf689c0c04396b12c364e9aa5690a +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | 11149a95c187415397f2702046e4f5d7 | | email | None | | enabled | True | | id | ed4bf689c0c04396b12c364e9aa5690a | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | | options | {} | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=ea11af387efd427cb425c678074851e2 + openstack role add --domain=11149a95c187415397f2702046e4f5d7 --user=ed4bf689c0c04396b12c364e9aa5690a --user-domain=11149a95c187415397f2702046e4f5d7 ea11af387efd427cb425c678074851e2 + openstack role assignment list --role=ea11af387efd427cb425c678074851e2 --user-domain=11149a95c187415397f2702046e4f5d7 --user=ed4bf689c0c04396b12c364e9aa5690a +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | ea11af387efd427cb425c678074851e2 | ed4bf689c0c04396b12c364e9aa5690a | | | 11149a95c187415397f2702046e4f5d7 | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+