++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=560bd5a5e0b249fc8e9de06640527b23 + openstack domain show 560bd5a5e0b249fc8e9de06640527b23 +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | description | Service Domain for RegionOne/magnum | | enabled | True | | id | 560bd5a5e0b249fc8e9de06640527b23 | | name | magnum | | options | {} | | tags | [] | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=560bd5a5e0b249fc8e9de06640527b23 --description 'Service User for RegionOne/magnum' --password=uScQHtPDfVYhNNwpZ8Qak63Gc3N1HcUV magnum-domain-RegionOne + SERVICE_OS_USERID=67f36c2ec530443e9043310038319ace + openstack user set --password=uScQHtPDfVYhNNwpZ8Qak63Gc3N1HcUV 67f36c2ec530443e9043310038319ace + openstack user show 67f36c2ec530443e9043310038319ace +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | 560bd5a5e0b249fc8e9de06640527b23 | | email | None | | enabled | True | | id | 67f36c2ec530443e9043310038319ace | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=a99a21a5667040949b4318a1c3a225aa + openstack role add --domain=560bd5a5e0b249fc8e9de06640527b23 --user=67f36c2ec530443e9043310038319ace --user-domain=560bd5a5e0b249fc8e9de06640527b23 a99a21a5667040949b4318a1c3a225aa + openstack role assignment list --role=a99a21a5667040949b4318a1c3a225aa --user-domain=560bd5a5e0b249fc8e9de06640527b23 --user=67f36c2ec530443e9043310038319ace +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | a99a21a5667040949b4318a1c3a225aa | 67f36c2ec530443e9043310038319ace | | | 560bd5a5e0b249fc8e9de06640527b23 | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+