++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=98c9d9371cde4d329176cbcacef68aa7 + openstack domain show 98c9d9371cde4d329176cbcacef68aa7 +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | description | Service Domain for RegionOne/magnum | | enabled | True | | id | 98c9d9371cde4d329176cbcacef68aa7 | | name | magnum | | options | {} | | tags | [] | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=98c9d9371cde4d329176cbcacef68aa7 --description 'Service User for RegionOne/magnum' --password=vriO5jXKgSctUboH83Jm4ehjv0rppr4N magnum-domain-RegionOne + SERVICE_OS_USERID=f17e1e55367a400aa4ef2d791468108b + openstack user set --password=vriO5jXKgSctUboH83Jm4ehjv0rppr4N f17e1e55367a400aa4ef2d791468108b + openstack user show f17e1e55367a400aa4ef2d791468108b +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | 98c9d9371cde4d329176cbcacef68aa7 | | email | None | | enabled | True | | id | f17e1e55367a400aa4ef2d791468108b | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=3ef0ec66e16046d382b79e43378c8176 + openstack role add --domain=98c9d9371cde4d329176cbcacef68aa7 --user=f17e1e55367a400aa4ef2d791468108b --user-domain=98c9d9371cde4d329176cbcacef68aa7 3ef0ec66e16046d382b79e43378c8176 + openstack role assignment list --role=3ef0ec66e16046d382b79e43378c8176 --user-domain=98c9d9371cde4d329176cbcacef68aa7 --user=f17e1e55367a400aa4ef2d791468108b +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | 3ef0ec66e16046d382b79e43378c8176 | f17e1e55367a400aa4ef2d791468108b | | | 98c9d9371cde4d329176cbcacef68aa7 | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+