1 description: Deprecated. Please migrate to use overcloud-without-mergepy instead.
2 heat_template_version: 2013-05-23
6 description: The password for the keystone admin account, used for monitoring, querying neutron etc.
11 description: The keystone auth secret.
14 CeilometerComputeAgent:
15 description: Indicates whether the Compute agent is present and expects nova-compute to be configured accordingly
19 - allowed_values: ['', Present]
20 CeilometerMeteringSecret:
22 description: Secret shared by the ceilometer services.
27 description: The password for the ceilometer service account.
32 description: The iSCSI helper to use with cinder.
34 CinderLVMLoopDeviceSize:
36 description: The size of the loopback file used by the cinder LVM driver.
40 description: The password for the cinder service account, used by cinder-api.
45 description: The DNS name of this cloud. E.g. ci-overcloud.tripleo.org
49 description: Should be used for arbitrary ips.
51 controllerExtraConfig:
54 Controller specific configuration to inject into the cluster. Same
55 structure as ExtraConfig.
59 default: overcloud-control
61 - custom_constraint: glance.image
62 ControlVirtualInterface:
64 description: Interface where virtual ip will be assigned.
68 description: Set to True to enable debugging on all services.
70 DefaultSignalTransport:
72 description: Transport to use for software-config signals.
75 - allowed_values: [ CFN_SIGNAL, HEAT_SIGNAL, NO_SIGNAL ]
79 Additional configuration to inject into the cluster. The JSON should have
80 the following structure:
83 [{"section": "SECTIONNAME",
85 [{"option": "OPTIONNAME",
96 [{"section": "default",
98 [{"option": "force_config_drive",
105 [{"option": "driver",
106 "value": "nova.cells.rpc_driver.CellsRPCDriver"
115 description: The filepath of the file to use for logging messages from Glance.
121 description: Horizon web server port.
124 description: The password for the glance service account, used by the glance services.
129 description: Glance port.
133 description: Protocol to use when connecting to glance, set to https for SSL.
135 GlanceNotifierStrategy:
136 description: Strategy to use for Glance notification queue
141 description: The password for the Heat service account, used by the Heat services.
144 HeatStackDomainAdminPassword:
145 description: Password for heat_domain_admin user.
149 HypervisorNeutronPhysicalBridge:
152 An OVS bridge to create on each hypervisor. This defaults to br-ex the
153 same as the control plane nodes, as we have a uniform configuration of
154 the openvswitch agent. Typically should not need to be changed.
156 HypervisorNeutronPublicInterface:
158 description: What interface to add to the HypervisorNeutronPhysicalBridge.
161 default: 'REBUILD_PRESERVE_EPHEMERAL'
162 description: What policy to use when reconstructing instances. REBUILD for rebuilds, REBUILD_PRESERVE_EPHEMERAL to preserve /mnt.
166 description: Name of an existing EC2 KeyPair to enable SSH access to the instances
169 - custom_constraint: nova.keypair
170 KeystoneCACertificate:
172 description: Keystone self-signed certificate authority certificate.
174 KeystoneSigningCertificate:
176 description: Keystone certificate for verifying token validity.
180 description: Keystone key for signing tokens.
183 KeystoneSSLCertificate:
185 description: Keystone certificate for verifying token validity.
187 KeystoneSSLCertificateKey:
189 description: Keystone key for signing tokens.
192 MysqlInnodbBufferPoolSize:
194 Specifies the size of the buffer pool in megabytes. Setting to
195 zero should be interpreted as "no value" and will defer to the
199 NeutronBridgeMappings:
201 The OVS logical->physical bridge mappings to use. See the Neutron
202 documentation for details. Defaults to mapping br-ex - the external
203 bridge on hosts - to a physical name 'datacentre' which can be used
204 to create provider networks (and we use this for the default floating
205 network) - if changing this either use different post-install network
206 scripts or be sure to keep 'datacentre' as a mapping network name.
208 default: "datacentre:br-ex"
209 NeutronControlPlaneID:
212 description: Neutron ID for ctlplane network.
213 NeutronDnsmasqOptions:
214 default: 'dhcp-option-force=26,1400'
215 description: Dnsmasq options for neutron-dhcp-agent. The default value here forces MTU to be set to 1400 to account for the tunnel overhead.
219 default: 'datacentre'
221 If set, flat networks to configure in neutron plugins. Defaults to
222 'datacentre' to permit external network creation.
225 description: The tenant network type for Neutron, either gre or vxlan.
227 NeutronNetworkVLANRanges:
228 default: 'datacentre'
230 The Neutron ML2 and OpenVSwitch vlan mapping range to support. See the
231 Neutron documentation for permitted values. Defaults to permitting any
232 VLAN on the 'datacentre' physical network (See NeutronBridgeMappings).
236 description: The password for the neutron service account, used by neutron agents.
239 NeutronPublicInterface:
241 description: What interface to bridge onto br-ex for network nodes.
243 NeutronPublicInterfaceDefaultRoute:
245 description: A custom default route for the NeutronPublicInterface.
247 NeutronPublicInterfaceIP:
249 description: A custom IP address to put onto the NeutronPublicInterface.
251 NeutronPublicInterfaceRawDevice:
253 description: If set, the public interface is a vlan with this device as the raw device.
255 NeutronPublicInterfaceTag:
258 VLAN tag for creating a public VLAN. The tag will be used to
259 create an access port on the exterior bridge for each control plane node,
260 and that port will be given the IP address returned by neutron from the
261 public network. Set CONTROLEXTRA=overcloud-vlan-port.yaml when compiling
262 overcloud.yaml to include the deployment of VLAN ports to the control
265 NeutronComputeAgentMode:
267 description: Agent mode for the neutron-l3-agent on the compute hosts
271 description: Agent mode for the neutron-l3-agent on the controller hosts
275 description: Whether to configure Neutron Distributed Virtual Routers
277 NeutronMetadataProxySharedSecret:
279 description: Shared secret to prevent spoofing
284 The tunnel types for the Neutron tenant network. To specify multiple
285 values, use a comma separated string, like so: 'gre,vxlan'
287 NeutronMechanismDrivers:
288 default: 'openvswitch'
290 The mechanism drivers for the Neutron tenant network. To specify multiple
291 values, use a comma separated string, like so: 'openvswitch,l2_population'
293 NeutronAllowL3AgentFailover:
295 description: Allow automatic l3-agent failover
299 description: Whether to enable l3-agent HA
302 default: libvirt.LibvirtDriver
304 NovaComputeExtraConfig:
307 NovaCompute specific configuration to inject into the cluster. Same
308 structure as ExtraConfig.
310 NovaComputeLibvirtType:
315 default: overcloud-compute
317 - custom_constraint: glance.image
320 description: The password for the nova service account, used by nova-api.
326 OvercloudComputeFlavor:
327 description: Flavor for compute nodes to request when deploying.
330 - custom_constraint: nova.flavor
331 OvercloudControlFlavor:
332 description: Flavor for control nodes to request when deploying.
335 - custom_constraint: nova.flavor
336 PublicVirtualFixedIPs:
339 Control the IP allocation for the PublicVirtualInterface port. E.g.
340 [{'ip_address':'1.2.3.4'}]
342 PublicVirtualInterface:
345 Specifies the interface where the public-facing virtual ip will be assigned.
346 This should be int_public when a VLAN is being used.
348 PublicVirtualNetwork:
352 Neutron network to allocate public virtual IP port on.
356 description: Salt for the rabbit cookie, change this to force the randomly generated rabbit cookie to change.
359 description: The password for RabbitMQ
364 description: The username for RabbitMQ
369 Rabbit client subscriber parameter to specify
370 an SSL connection to the RabbitMQ host.
374 description: Set rabbit subscriber port, change this if using SSL
376 SnmpdReadonlyUserName:
377 default: ro_snmp_user
378 description: The user name for SNMPd with readonly rights running on all Overcloud nodes
380 SnmpdReadonlyUserPassword:
382 description: The user password for SNMPd with readonly rights running on all Overcloud nodes
387 type: OS::Neutron::Port
389 name: control_virtual_ip
390 network_id: {get_param: NeutronControlPlaneID}
392 get_param: ControlFixedIPs
393 replacement_policy: AUTO
394 MysqlClusterUniquePart:
395 type: OS::Heat::RandomString
399 type: OS::Heat::RandomString
403 type: OS::Neutron::Port
405 name: public_virtual_ip
406 network: {get_param: PublicVirtualNetwork}
408 get_param: PublicVirtualFixedIPs
409 replacement_policy: AUTO
411 type: OS::Heat::RandomString
415 get_param: RabbitCookieSalt
416 NovaCompute0Deployment:
418 Path: deprecated/nova-compute-instance.yaml
419 SubKey: resources.NovaCompute0Deployment
421 DefaultSignalTransport:
422 get_param: DefaultSignalTransport
423 NovaApiHost: {get_attr: [ControlVirtualIP, fixed_ips, 0, ip_address]}
424 KeystoneHost: {get_attr: [ControlVirtualIP, fixed_ips, 0, ip_address]}
425 NeutronHost: {get_attr: [ControlVirtualIP, fixed_ips, 0, ip_address]}
426 GlanceHost: {get_attr: [ControlVirtualIP, fixed_ips, 0, ip_address]}
427 RabbitHost: {get_attr: [ControlVirtualIP, fixed_ips, 0, ip_address]}
428 NovaPublicIP: {get_attr: [PublicVirtualIP, fixed_ips, 0, ip_address]}
430 get_param: NeutronNetworkType
432 get_param: NeutronTunnelTypes
433 NeutronEnableTunnelling: "True"
435 get_param: NeutronFlatNetworks
436 NeutronNetworkVLANRanges:
437 get_param: NeutronNetworkVLANRanges
438 NeutronPhysicalBridge:
439 get_param: HypervisorNeutronPhysicalBridge
440 NeutronPublicInterface:
441 get_param: HypervisorNeutronPublicInterface
442 NeutronBridgeMappings:
443 get_param: NeutronBridgeMappings
445 get_param: NeutronDVR
447 get_param: NeutronComputeAgentMode
448 NeutronPublicInterfaceRawDevice:
449 get_param: NeutronPublicInterfaceRawDevice
450 NeutronMechanismDrivers:
451 get_param: NeutronMechanismDrivers
452 NeutronAllowL3AgentFailover:
453 get_param: NeutronAllowL3AgentFailover
455 get_param: NeutronL3HA
456 NovaCompute0AllNodesDeployment:
458 Path: deprecated/nova-compute-instance.yaml
459 SubKey: resources.NovaCompute0AllNodesDeployment
461 AllNodesConfig: {get_resource: allNodesConfig}
464 Path: deprecated/nova-compute-instance.yaml
465 SubKey: resources.NovaCompute0
466 NovaCompute0Passthrough:
468 Path: deprecated/nova-compute-instance.yaml
469 SubKey: resources.NovaCompute0Passthrough
471 passthrough_config: {get_param: ExtraConfig}
472 NovaCompute0PassthroughSpecific:
474 Path: deprecated/nova-compute-instance.yaml
475 SubKey: resources.NovaCompute0PassthroughSpecific
477 passthrough_config_specific: {get_param: NovaComputeExtraConfig}
478 HeatAuthEncryptionKey:
479 type: OS::Heat::RandomString
481 type: OS::Heat::StructuredConfig
483 group: os-apply-config
486 get_param: AdminPassword
488 get_param: AdminToken
491 get_param: NeutronPublicInterfaceIP
503 nodeid: {get_input: bootstack_nodeid}
506 {get_attr: [ControlVirtualIP, fixed_ips, 0, ip_address]}
511 - - mysql://cinder:unset@
514 debug: {get_param: Debug}
516 get_param: CinderLVMLoopDeviceSize
518 get_param: CinderPassword
520 get_param: CinderISCSIHelper
522 get_input: controller_host
524 bindnetaddr: {get_input: controller_host}
529 ip: {get_attr: [controller0, networks, ctlplane, 0]}
531 stonith_enabled : false
533 quorum_policy : ignore
537 host: {get_input: controller_virtual_ip}
542 - - mysql://glance:unset@
545 debug: {get_param: Debug}
547 get_input: controller_virtual_ip
549 get_param: GlancePort
551 get_param: GlanceProtocol
553 get_param: GlancePassword
554 swift-store-user: service:glance
556 get_param: GlancePassword
558 get_param: GlanceNotifierStrategy
560 get_param: GlanceLogFile
563 get_param: HeatPassword
564 admin_tenant_name: service
567 get_resource: HeatAuthEncryptionKey
571 - - mysql://heat:unset@
574 debug: {get_param: Debug}
575 stack_domain_admin_password: {get_param: HeatStackDomainAdminPassword}
576 watch_server_url: {get_input: heat.watch_server_url}
577 metadata_server_url: {get_input: heat.metadata_server_url}
578 waitcondition_server_url: {get_input: heat.waitcondition_server_url}
580 port: {get_param: HorizonPort}
586 {get_attr: [controller0, name]}
591 - - mysql://keystone:unset@
594 debug: {get_param: Debug}
596 get_input: controller_virtual_ip
597 ca_certificate: {get_param: KeystoneCACertificate}
598 signing_key: {get_param: KeystoneSigningKey}
599 signing_certificate: {get_param: KeystoneSigningCertificate}
601 certificate: {get_param: KeystoneSSLCertificate}
602 certificate_key: {get_param: KeystoneSSLCertificateKey}
604 innodb_buffer_pool_size: {get_param: MysqlInnodbBufferPoolSize}
606 root-password: {get_resource: MysqlRootPassword}
610 ip: {get_attr: [controller0, networks, ctlplane, 0]}
615 - {get_resource: MysqlClusterUniquePart}
617 debug: {get_param: Debug}
618 flat-networks: {get_param: NeutronFlatNetworks}
619 host: {get_input: controller_virtual_ip}
620 metadata_proxy_shared_secret: {get_param: NeutronMetadataProxySharedSecret}
621 agent_mode: {get_param: NeutronAgentMode}
622 router_distributed: {get_param: NeutronDVR}
623 mechanism_drivers: {get_param: NeutronMechanismDrivers}
624 allow_automatic_l3agent_failover: {get_param: NeutronAllowL3AgentFailover}
625 l3_ha: {get_param: NeutronL3HA}
627 enable_tunneling: 'True'
629 get_input: controller_host
630 network_vlan_ranges: {get_param: NeutronNetworkVLANRanges}
631 bridge_mappings: {get_param: NeutronBridgeMappings}
633 get_param: NeutronPublicInterface
634 public_interface_raw_device:
635 get_param: NeutronPublicInterfaceRawDevice
636 public_interface_route:
637 get_param: NeutronPublicInterfaceDefaultRoute
638 public_interface_tag:
639 get_param: NeutronPublicInterfaceTag
640 physical_bridge: br-ex
642 get_param: NeutronNetworkType
644 get_param: NeutronTunnelTypes
648 - - mysql://neutron:unset@
650 - /ovs_neutron?charset=utf8
652 get_param: NeutronPassword
654 get_param: NeutronDnsmasqOptions
659 - - mysql://ceilometer:unset@
662 debug: {get_param: Debug}
663 metering_secret: {get_param: CeilometerMeteringSecret}
665 get_param: CeilometerPassword
667 export_MIB: UCD-SNMP-MIB
669 get_param: SnmpdReadonlyUserName
670 readonly_user_password:
671 get_param: SnmpdReadonlyUserPassword
673 compute_driver: libvirt.LibvirtDriver
677 - - mysql://nova:unset@
680 default_floating_pool:
682 host: {get_input: controller_virtual_ip}
685 get_param: NovaPassword
687 host: {get_input: controller_virtual_ip}
689 get_param: RabbitUserName
691 get_param: RabbitPassword
696 rabbit_client_use_ssl: {get_param: RabbitClientUseSSL}
697 rabbit_port: {get_param: RabbitClientPort}
700 - {server: {get_param: NtpServer}}
703 - vrrp_instance_name: VI_CONTROL
704 virtual_router_id: 51
706 get_param: ControlVirtualInterface
709 - ip: {get_attr: [ControlVirtualIP, fixed_ips, 0, ip_address]}
711 get_param: ControlVirtualInterface
712 - vrrp_instance_name: VI_PUBLIC
713 virtual_router_id: 52
715 get_param: PublicVirtualInterface
718 - ip: {get_attr: [PublicVirtualIP, fixed_ips, 0, ip_address]}
720 get_param: PublicVirtualInterface
728 get_param: PublicVirtualInterface
732 ip: {get_attr: [ControlVirtualIP, fixed_ips, 0, ip_address]}
734 get_param: ControlVirtualInterface
736 ip: {get_attr: [PublicVirtualIP, fixed_ips, 0, ip_address]}
738 get_param: PublicVirtualInterface
743 ip: {get_attr: [controller0, networks, ctlplane, 0]}
744 name: {get_attr: [controller0, name]}
746 - &control_vip {ip: {get_attr: [ControlVirtualIP, fixed_ips, 0, ip_address]}}
747 - &public_vip {ip: {get_attr: [PublicVirtualIP, fixed_ips, 0, ip_address]}}
749 - option httpchk GET /
751 - name: keystone_admin
753 - name: keystone_public
763 - name: glance_registry
765 options: # overwrite options as glace_reg needs auth for http req
768 - name: heat_cloudwatch
785 - name: nova_metadata
787 - name: nova_novncproxy
791 options: # overwrite options as ceil needs auth for http req
792 - name: swift_proxy_server
795 - option httpchk GET /info
804 controllerPassthrough:
805 type: OS::Heat::StructuredConfig
807 group: os-apply-config
808 config: {get_input: passthrough_config}
809 controllerPassthroughSpecific:
810 type: OS::Heat::StructuredConfig
812 group: os-apply-config
813 config: {get_input: passthrough_config_specific}
815 type: OS::Nova::Server
818 get_param: controllerImage
820 get_param: ImageUpdatePolicy
822 get_param: OvercloudControlFlavor
827 user_data_format: SOFTWARE_CONFIG
828 controller0AllNodesDeployment:
829 depends_on: [controller0Deployment,controller0SSLDeployment,controller0Swift,controller0PassthroughSpecific]
830 type: OS::Heat::StructuredDeployment
832 signal_transport: {get_param: DefaultSignalTransport}
833 config: {get_resource: allNodesConfig}
834 server: {get_resource: controller0}
835 controller0Deployment:
836 type: OS::Heat::StructuredDeployment
838 signal_transport: NO_SIGNAL
839 config: {get_resource: controllerConfig}
840 server: {get_resource: controller0}
842 bootstack_nodeid: {get_attr: [controller0, name]}
843 controller_host: {get_attr: [controller0, networks, ctlplane, 0]}
844 controller_virtual_ip:
845 {get_attr: [ControlVirtualIP, fixed_ips, 0, ip_address]}
846 heat.watch_server_url:
850 - {get_attr: [ControlVirtualIP, fixed_ips, 0, ip_address]}
852 heat.metadata_server_url:
856 - {get_attr: [ControlVirtualIP, fixed_ips, 0, ip_address]}
858 heat.waitcondition_server_url:
862 - {get_attr: [ControlVirtualIP, fixed_ips, 0, ip_address]}
863 - ':8000/v1/waitcondition'
865 type: OS::Heat::StructuredConfig
868 completion-signal: {get_input: deploy_signal_id}
878 - - {get_attr: [NovaCompute0, networks, ctlplane, 0]}
879 - {get_attr: [NovaCompute0, name]}
886 - - {get_attr: [BlockStorage0, networks, ctlplane, 0]}
887 - {get_attr: [BlockStorage0, name]}
894 - - {get_attr: [SwiftStorage0, networks, ctlplane, 0]}
895 - {get_attr: [SwiftStorage0, name]}
902 - - {get_attr: [controller0, networks, ctlplane, 0]}
903 - {get_attr: [controller0, name]}
904 - {get_param: CloudName}
911 {get_attr: [controller0, name]}
913 net.ipv4.tcp_keepalive_time: 5
914 net.ipv4.tcp_keepalive_probes: 5
915 net.ipv4.tcp_keepalive_intvl: 1
916 controller0SSLDeployment:
917 type: OS::Heat::StructuredDeployment
919 config: {get_resource: SSLConfig}
920 server: {get_resource: controller0}
921 signal_transport: NO_SIGNAL
923 controller_host: {get_attr: [controller0, networks, ctlplane, 0]}
924 ssl_certificate: {get_param: SSLCertificate}
925 ssl_key: {get_param: SSLKey}
926 ssl_ca_certificate: {get_param: SSLCACertificate}
927 controller0Passthrough:
928 type: OS::Heat::StructuredDeployment
930 config: {get_resource: controllerPassthrough}
931 server: {get_resource: controller0}
932 signal_transport: NO_SIGNAL
934 passthrough_config: {get_param: ExtraConfig}
935 controller0PassthroughSpecific:
936 depends_on: [controller0Passthrough]
937 type: OS::Heat::StructuredDeployment
939 config: {get_resource: controllerPassthroughSpecific}
940 server: {get_resource: controller0}
941 signal_transport: NO_SIGNAL
943 passthrough_config_specific: {get_param: controllerExtraConfig}
946 description: URL for the Overcloud Keystone service
951 - {get_attr: [ControlVirtualIP, fixed_ips, 0, ip_address]}