++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=6bf0b3133fc4403aa14925646bc993bc + openstack domain show 6bf0b3133fc4403aa14925646bc993bc +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | description | Service Domain for RegionOne/magnum | | enabled | True | | id | 6bf0b3133fc4403aa14925646bc993bc | | name | magnum | | options | {} | | tags | [] | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=6bf0b3133fc4403aa14925646bc993bc --description 'Service User for RegionOne/magnum' --password=Qvz3fHrVd7GhT9TqxnXqARSVPO4zjqVf magnum-domain-RegionOne + SERVICE_OS_USERID=3ecaaf43cb244abcb048ccfd01913d1b + openstack user set --password=Qvz3fHrVd7GhT9TqxnXqARSVPO4zjqVf 3ecaaf43cb244abcb048ccfd01913d1b + openstack user show 3ecaaf43cb244abcb048ccfd01913d1b +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | 6bf0b3133fc4403aa14925646bc993bc | | email | None | | enabled | True | | id | 3ecaaf43cb244abcb048ccfd01913d1b | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=d27a739c1c6c4623a9acb946fd477a58 + openstack role add --domain=6bf0b3133fc4403aa14925646bc993bc --user=3ecaaf43cb244abcb048ccfd01913d1b --user-domain=6bf0b3133fc4403aa14925646bc993bc d27a739c1c6c4623a9acb946fd477a58 + openstack role assignment list --role=d27a739c1c6c4623a9acb946fd477a58 --user-domain=6bf0b3133fc4403aa14925646bc993bc --user=3ecaaf43cb244abcb048ccfd01913d1b +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | d27a739c1c6c4623a9acb946fd477a58 | 3ecaaf43cb244abcb048ccfd01913d1b | | | 6bf0b3133fc4403aa14925646bc993bc | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+