Adding users in Keystone
Adding users to OpenStack Identity service requires the user to belong to a domain or a project in the domain and to be assigned a role defined in the domain or the project. For this section, we will create two users. The first user will be named cloud_admin
and will have the cloud_admin
role assigned to them in the cookbook
project. The second user will be named reader
and will have the default _member_
role assigned to them in the same cookbook
project.
Getting ready
Ensure that you are logged on to a correctly configured OpenStack client and can access the OpenStack environment as a user with admin privileges.
Refer to Chapter 2, The OpenStack Client, for details of setting up your environment to use OpenStack command-line client.
How to do it…
In order to create a user in OpenStack and assign roles to it, we will need to execute the commands listed below.
First, get the
bookstore
domain ID or domain name:Using the
bookstore
domain name, create a newcloud_admin
user...