++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=19cea7e913784ab5bf25d53dd20f9d7b + openstack domain show 19cea7e913784ab5bf25d53dd20f9d7b +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | id | 19cea7e913784ab5bf25d53dd20f9d7b | | name | magnum | | enabled | True | | description | Service Domain for RegionOne/magnum | | options | {} | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=19cea7e913784ab5bf25d53dd20f9d7b --description 'Service User for RegionOne/magnum' --password=DbqMRmZln1ROCo7nHA1Q1mUBZ6RpwCKz magnum-domain-RegionOne + SERVICE_OS_USERID=a20556c656244bb2a53f394ae8dfb891 + openstack user set --password=DbqMRmZln1ROCo7nHA1Q1mUBZ6RpwCKz a20556c656244bb2a53f394ae8dfb891 + openstack user show a20556c656244bb2a53f394ae8dfb891 +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | 19cea7e913784ab5bf25d53dd20f9d7b | | email | None | | enabled | True | | id | a20556c656244bb2a53f394ae8dfb891 | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | | options | {} | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=be5077c000874e0487a1239574597106 + openstack role add --domain=19cea7e913784ab5bf25d53dd20f9d7b --user=a20556c656244bb2a53f394ae8dfb891 --user-domain=19cea7e913784ab5bf25d53dd20f9d7b be5077c000874e0487a1239574597106 + openstack role assignment list --role=be5077c000874e0487a1239574597106 --user-domain=19cea7e913784ab5bf25d53dd20f9d7b --user=a20556c656244bb2a53f394ae8dfb891 +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | be5077c000874e0487a1239574597106 | a20556c656244bb2a53f394ae8dfb891 | | | 19cea7e913784ab5bf25d53dd20f9d7b | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+