++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=b801ea972160452aaf968be56899126e + openstack domain show b801ea972160452aaf968be56899126e +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | id | b801ea972160452aaf968be56899126e | | name | magnum | | enabled | True | | description | Service Domain for RegionOne/magnum | | options | {} | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=b801ea972160452aaf968be56899126e --description 'Service User for RegionOne/magnum' --password=WRTixHF3nz0D7AKE8R2t6yPb6BYQ013i magnum-domain-RegionOne + SERVICE_OS_USERID=9bca1a312b2341008e636e8d738accf9 + openstack user set --password=WRTixHF3nz0D7AKE8R2t6yPb6BYQ013i 9bca1a312b2341008e636e8d738accf9 + openstack user show 9bca1a312b2341008e636e8d738accf9 +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | b801ea972160452aaf968be56899126e | | email | None | | enabled | True | | id | 9bca1a312b2341008e636e8d738accf9 | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | | options | {} | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=2a316a3e06c8497a80f81389ad3312ef + openstack role add --domain=b801ea972160452aaf968be56899126e --user=9bca1a312b2341008e636e8d738accf9 --user-domain=b801ea972160452aaf968be56899126e 2a316a3e06c8497a80f81389ad3312ef + openstack role assignment list --role=2a316a3e06c8497a80f81389ad3312ef --user-domain=b801ea972160452aaf968be56899126e --user=9bca1a312b2341008e636e8d738accf9 +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | 2a316a3e06c8497a80f81389ad3312ef | 9bca1a312b2341008e636e8d738accf9 | | | b801ea972160452aaf968be56899126e | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+