++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=05194f584d77474e8ec90e7e8f7811f1 + openstack domain show 05194f584d77474e8ec90e7e8f7811f1 +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | id | 05194f584d77474e8ec90e7e8f7811f1 | | name | magnum | | enabled | True | | description | Service Domain for RegionOne/magnum | | options | {} | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=05194f584d77474e8ec90e7e8f7811f1 --description 'Service User for RegionOne/magnum' --password=DWcmjhuhz9trV6LSNlF6YvlJiz4Bov20 magnum-domain-RegionOne + SERVICE_OS_USERID=53b3083a74ea4c9585c79eeacafed16a + openstack user set --password=DWcmjhuhz9trV6LSNlF6YvlJiz4Bov20 53b3083a74ea4c9585c79eeacafed16a + openstack user show 53b3083a74ea4c9585c79eeacafed16a +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | 05194f584d77474e8ec90e7e8f7811f1 | | email | None | | enabled | True | | id | 53b3083a74ea4c9585c79eeacafed16a | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | | options | {} | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=5ffb8edb3f80464d9ff24148fb2be68f + openstack role add --domain=05194f584d77474e8ec90e7e8f7811f1 --user=53b3083a74ea4c9585c79eeacafed16a --user-domain=05194f584d77474e8ec90e7e8f7811f1 5ffb8edb3f80464d9ff24148fb2be68f + openstack role assignment list --role=5ffb8edb3f80464d9ff24148fb2be68f --user-domain=05194f584d77474e8ec90e7e8f7811f1 --user=53b3083a74ea4c9585c79eeacafed16a +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | 5ffb8edb3f80464d9ff24148fb2be68f | 53b3083a74ea4c9585c79eeacafed16a | | | 05194f584d77474e8ec90e7e8f7811f1 | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+