++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=233dcf024c644bbca88c77b77577538e + openstack domain show 233dcf024c644bbca88c77b77577538e +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | id | 233dcf024c644bbca88c77b77577538e | | name | magnum | | enabled | True | | description | Service Domain for RegionOne/magnum | | options | {} | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=233dcf024c644bbca88c77b77577538e --description 'Service User for RegionOne/magnum' --password=4Uf2lel5f0RWTJr8yVvkdWCXlS3sc7kW magnum-domain-RegionOne + SERVICE_OS_USERID=c4a986f56dd146079043eebd461e9eff + openstack user set --password=4Uf2lel5f0RWTJr8yVvkdWCXlS3sc7kW c4a986f56dd146079043eebd461e9eff + openstack user show c4a986f56dd146079043eebd461e9eff +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | 233dcf024c644bbca88c77b77577538e | | email | None | | enabled | True | | id | c4a986f56dd146079043eebd461e9eff | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | | options | {} | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=1deeadeaad1a462c81104c9a790d6867 + openstack role add --domain=233dcf024c644bbca88c77b77577538e --user=c4a986f56dd146079043eebd461e9eff --user-domain=233dcf024c644bbca88c77b77577538e 1deeadeaad1a462c81104c9a790d6867 + openstack role assignment list --role=1deeadeaad1a462c81104c9a790d6867 --user-domain=233dcf024c644bbca88c77b77577538e --user=c4a986f56dd146079043eebd461e9eff +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | 1deeadeaad1a462c81104c9a790d6867 | c4a986f56dd146079043eebd461e9eff | | | 233dcf024c644bbca88c77b77577538e | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+