++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=e17fabdc16814b9db759d96c48707bfc + openstack domain show e17fabdc16814b9db759d96c48707bfc +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | description | Service Domain for RegionOne/magnum | | enabled | True | | id | e17fabdc16814b9db759d96c48707bfc | | name | magnum | | options | {} | | tags | [] | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=e17fabdc16814b9db759d96c48707bfc --description 'Service User for RegionOne/magnum' --password=Hbo9GgT5BAaKJbwc4KZAoAfPbM00psDi magnum-domain-RegionOne + SERVICE_OS_USERID=dffce01947304873a32ed1b1ab5bb6ed + openstack user set --password=Hbo9GgT5BAaKJbwc4KZAoAfPbM00psDi dffce01947304873a32ed1b1ab5bb6ed + openstack user show dffce01947304873a32ed1b1ab5bb6ed +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | e17fabdc16814b9db759d96c48707bfc | | email | None | | enabled | True | | id | dffce01947304873a32ed1b1ab5bb6ed | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=a49198b76f0841b09b087fd527b41c88 + openstack role add --domain=e17fabdc16814b9db759d96c48707bfc --user=dffce01947304873a32ed1b1ab5bb6ed --user-domain=e17fabdc16814b9db759d96c48707bfc a49198b76f0841b09b087fd527b41c88 + openstack role assignment list --role=a49198b76f0841b09b087fd527b41c88 --user-domain=e17fabdc16814b9db759d96c48707bfc --user=dffce01947304873a32ed1b1ab5bb6ed +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | a49198b76f0841b09b087fd527b41c88 | dffce01947304873a32ed1b1ab5bb6ed | | | e17fabdc16814b9db759d96c48707bfc | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+