++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=e650413a94744ea5a10ec9468533ef54 + openstack domain show e650413a94744ea5a10ec9468533ef54 +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | description | Service Domain for RegionOne/magnum | | enabled | True | | id | e650413a94744ea5a10ec9468533ef54 | | name | magnum | | options | {} | | tags | [] | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=e650413a94744ea5a10ec9468533ef54 --description 'Service User for RegionOne/magnum' --password=io5KXWJpe2zz7EefdBwchub8m221NPCv magnum-domain-RegionOne + SERVICE_OS_USERID=ff0f88419dc5493998f0e444251aef74 + openstack user set --password=io5KXWJpe2zz7EefdBwchub8m221NPCv ff0f88419dc5493998f0e444251aef74 + openstack user show ff0f88419dc5493998f0e444251aef74 +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | e650413a94744ea5a10ec9468533ef54 | | email | None | | enabled | True | | id | ff0f88419dc5493998f0e444251aef74 | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=51eeea8f8004457c87bfa59b0b6a64af + openstack role add --domain=e650413a94744ea5a10ec9468533ef54 --user=ff0f88419dc5493998f0e444251aef74 --user-domain=e650413a94744ea5a10ec9468533ef54 51eeea8f8004457c87bfa59b0b6a64af + openstack role assignment list --role=51eeea8f8004457c87bfa59b0b6a64af --user-domain=e650413a94744ea5a10ec9468533ef54 --user=ff0f88419dc5493998f0e444251aef74 +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | 51eeea8f8004457c87bfa59b0b6a64af | ff0f88419dc5493998f0e444251aef74 | | | e650413a94744ea5a10ec9468533ef54 | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+