++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=d18e67773e7e4c40aba9539217be446d + openstack domain show d18e67773e7e4c40aba9539217be446d +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | id | d18e67773e7e4c40aba9539217be446d | | name | magnum | | enabled | True | | description | Service Domain for RegionOne/magnum | | options | {} | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=d18e67773e7e4c40aba9539217be446d --description 'Service User for RegionOne/magnum' --password=yqdqNLx8370ClXqzo61bFCJgAWE7CosM magnum-domain-RegionOne + SERVICE_OS_USERID=fad1ac63fe674900abd53dca34093a74 + openstack user set --password=yqdqNLx8370ClXqzo61bFCJgAWE7CosM fad1ac63fe674900abd53dca34093a74 + openstack user show fad1ac63fe674900abd53dca34093a74 +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | d18e67773e7e4c40aba9539217be446d | | email | None | | enabled | True | | id | fad1ac63fe674900abd53dca34093a74 | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | | options | {} | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=ad492ea64a2b485f965db49c7a4cd8ef + openstack role add --domain=d18e67773e7e4c40aba9539217be446d --user=fad1ac63fe674900abd53dca34093a74 --user-domain=d18e67773e7e4c40aba9539217be446d ad492ea64a2b485f965db49c7a4cd8ef + openstack role assignment list --role=ad492ea64a2b485f965db49c7a4cd8ef --user-domain=d18e67773e7e4c40aba9539217be446d --user=fad1ac63fe674900abd53dca34093a74 +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | ad492ea64a2b485f965db49c7a4cd8ef | fad1ac63fe674900abd53dca34093a74 | | | d18e67773e7e4c40aba9539217be446d | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+