Creating tenant users - heat script

new_project.yaml

heat_template_version: 2015-04-30

description: Create a new Project. Assign a user and user-role pair.

parameters:
  demo_project_name:
    type: string
    description: project name
  demo_user_role:
    type: string
    description: name of the user role.
  demo_project_user:
    type: string
    description: Project user

resources:
  demo_project:
    type: OS::Keystone::Project
    properties:
      name: { get_param: demo_project_name }
      domain: default
      description: New Demo Project
  demo_role:
    type: OS::Keystone::Role
    properties:
      name: { get_param: demo_user_role }
  demo_user:
    type: OS::Keystone::User
    properties:
      name: { get_param: demo_project_user }
      domain: default
      description: Test user
      default_project: { get_resource: demo_project }
      password: cumulus
      roles:
        - role: { get_resource: demo_role}
          project: { get_resource: demo_project }