++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=57f26033bf70437d8ff70371c5094e9d + openstack domain show 57f26033bf70437d8ff70371c5094e9d +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | id | 57f26033bf70437d8ff70371c5094e9d | | name | magnum | | enabled | True | | description | Service Domain for RegionOne/magnum | | options | {} | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=57f26033bf70437d8ff70371c5094e9d --description 'Service User for RegionOne/magnum' --password=YwSnAOmVe77vAZzsi2ybilegKTSA2Iaa magnum-domain-RegionOne + SERVICE_OS_USERID=eb89d59e1d8f44b1b4d6b66aa0d74f49 + openstack user set --password=YwSnAOmVe77vAZzsi2ybilegKTSA2Iaa eb89d59e1d8f44b1b4d6b66aa0d74f49 + openstack user show eb89d59e1d8f44b1b4d6b66aa0d74f49 +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | 57f26033bf70437d8ff70371c5094e9d | | email | None | | enabled | True | | id | eb89d59e1d8f44b1b4d6b66aa0d74f49 | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | | options | {} | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=f5b48411ed244266a85c2968ef9a414e + openstack role add --domain=57f26033bf70437d8ff70371c5094e9d --user=eb89d59e1d8f44b1b4d6b66aa0d74f49 --user-domain=57f26033bf70437d8ff70371c5094e9d f5b48411ed244266a85c2968ef9a414e + openstack role assignment list --role=f5b48411ed244266a85c2968ef9a414e --user-domain=57f26033bf70437d8ff70371c5094e9d --user=eb89d59e1d8f44b1b4d6b66aa0d74f49 +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | f5b48411ed244266a85c2968ef9a414e | eb89d59e1d8f44b1b4d6b66aa0d74f49 | | | 57f26033bf70437d8ff70371c5094e9d | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+