++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=f8c4dafff89247bfb10ec3a383d3bdc6 + openstack domain show f8c4dafff89247bfb10ec3a383d3bdc6 +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | id | f8c4dafff89247bfb10ec3a383d3bdc6 | | name | magnum | | enabled | True | | description | Service Domain for RegionOne/magnum | | options | {} | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=f8c4dafff89247bfb10ec3a383d3bdc6 --description 'Service User for RegionOne/magnum' --password=91d4ATvOIWhc5fGBct2xwEacTHgUa1JU magnum-domain-RegionOne + SERVICE_OS_USERID=53e42b0cb6394d398ee932e8957412a1 + openstack user set --password=91d4ATvOIWhc5fGBct2xwEacTHgUa1JU 53e42b0cb6394d398ee932e8957412a1 + openstack user show 53e42b0cb6394d398ee932e8957412a1 +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | f8c4dafff89247bfb10ec3a383d3bdc6 | | email | None | | enabled | True | | id | 53e42b0cb6394d398ee932e8957412a1 | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | | options | {} | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=2bcdae14435a45b48a02342f27f7e40a + openstack role add --domain=f8c4dafff89247bfb10ec3a383d3bdc6 --user=53e42b0cb6394d398ee932e8957412a1 --user-domain=f8c4dafff89247bfb10ec3a383d3bdc6 2bcdae14435a45b48a02342f27f7e40a + openstack role assignment list --role=2bcdae14435a45b48a02342f27f7e40a --user-domain=f8c4dafff89247bfb10ec3a383d3bdc6 --user=53e42b0cb6394d398ee932e8957412a1 +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | 2bcdae14435a45b48a02342f27f7e40a | 53e42b0cb6394d398ee932e8957412a1 | | | f8c4dafff89247bfb10ec3a383d3bdc6 | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+