Disable nova bm file injection in undercloud
[apex-tripleo-heat-templates.git] / overcloud-source.yaml
1 Description: Nova API,Keystone,Heat Engine and API,Glance,Neutron,Dedicated MySQL
2   server,Dedicated RabbitMQ Server,Group of Nova Computes
3 HeatTemplateFormatVersion: '2012-12-12'
4 Parameters:
5   AdminPassword:
6     Default: unset
7     Description: The password for the keystone admin account, used for monitoring, querying neutron etc.
8     Type: String
9     NoEcho: true
10   AdminToken:
11     Default: unset
12     Description: The keystone auth secret.
13     Type: String
14     NoEcho: true
15   CinderPassword:
16     Default: unset
17     Description: The password for the cinder service account, used by cinder-api.
18     Type: String
19     NoEcho: true
20   Flavor:
21     Default: baremetal
22     Description: Flavor to request when deploying.
23     Type: String
24   GlancePassword:
25     Default: unset
26     Description: The password for the glance service account, used by the glance services.
27     Type: String
28     NoEcho: true
29   HeatPassword:
30     Default: unset
31     Description: The password for the Heat service account, used by the Heat services.
32     Type: String
33     NoEcho: true
34   KeyName:
35     Default: default
36     Description: Name of an existing EC2 KeyPair to enable SSH access to the instances
37     Type: String
38   NeutronPassword:
39     Default: unset
40     Description: The password for the neutron service account, used by neutron agents.
41     Type: String
42     NoEcho: true
43   NovaComputeDriver:
44     Default: libvirt.LibvirtDriver
45     Type: String
46   NovaComputeLibvirtType:
47     Default: ''
48     Type: String
49   NovaImage:
50     Type: String
51     Default: overcloud-compute
52   NovaPassword:
53     Default: unset
54     Description: The password for the nova service account, used by nova-api.
55     Type: String
56     NoEcho: true
57   PowerUserName:
58     Default: stack
59     Description: What username to ssh to the virtual power host with.
60     Type: String
61   NeutronPublicInterface:
62     Default: eth0
63     Description: What interface to bridge onto br-ex for network nodes.
64     Type: String
65   NeutronPublicInterfaceDefaultRoute:
66     Default: ''
67     Description: A custom default route for the NeutronPublicInterface.
68     Type: String
69   NeutronPublicInterfaceIP:
70     Default: ''
71     Description: A custom IP address to put onto the NeutronPublicInterface.
72     Type: String
73   NeutronPublicInterfaceRawDevice:
74     Default: ''
75     Description: If set, the public interface is a vlan with this device as the raw device.
76     Type: String
77   notcomputeImage:
78     Type: String
79     Default: overcloud-control
80 Resources:
81   AccessPolicy:
82     Properties:
83       AllowedResources:
84       - notcompute
85       - notcomputeConfig
86     Type: OS::Heat::AccessPolicy
87   ComputeAccessPolicy:
88     Properties:
89       AllowedResources:
90       - NovaCompute0
91       - NovaCompute0Config
92     Type: OS::Heat::AccessPolicy
93   Key:
94     Properties:
95       UserName:
96         Ref: User
97     Type: AWS::IAM::AccessKey
98   CompletionCondition:
99     Type: AWS::CloudFormation::WaitCondition
100     DependsOn: notcompute
101     Properties:
102       Handle: {Ref: CompletionHandle}
103       Count: '1'
104       Timeout: '1800'
105   CompletionHandle:
106     Type: AWS::CloudFormation::WaitConditionHandle
107   ComputeKey:
108     Properties:
109       UserName:
110         Ref: ComputeUser
111     Type: AWS::IAM::AccessKey
112   ComputeUser:
113     Properties:
114       Policies:
115       - Ref: ComputeAccessPolicy
116     Type: AWS::IAM::User
117   NovaCompute0Config:
118     Type: FileInclude
119     Path: nova-compute-instance.yaml
120     SubKey: Resources.NovaCompute0Config
121     Parameters:
122         NovaApiHost: {"Fn::Select": [ 0, {"Fn::Select": [ "ctlplane", {"Fn::GetAtt": [notcompute, networks]} ]} ] }
123         KeystoneHost: {"Fn::Select": [ 0, {"Fn::Select": [ "ctlplane", {"Fn::GetAtt": [notcompute, networks]} ]} ] }
124         RabbitHost: {"Fn::Select": [ 0, {"Fn::Select": [ "ctlplane", {"Fn::GetAtt": [notcompute, networks]} ]} ] }
125         NeutronHost: {"Fn::Select": [ 0, {"Fn::Select": [ "ctlplane", {"Fn::GetAtt": [notcompute, networks]} ]} ] }
126         GlanceHost: {"Fn::Select": [ 0, {"Fn::Select": [ "ctlplane", {"Fn::GetAtt": [notcompute, networks]} ]} ] }
127         NovaDSN: {"Fn::Join": ['', ['mysql://nova:unset@', {"Fn::Select": [ 0, {"Fn::Select": [ "ctlplane", {"Fn::GetAtt": [notcompute, networks]} ]} ]}, '/nova']]}
128         NeutronDSN: {"Fn::Join": ['', ['mysql://neutron:unset@', {"Fn::Select": [ 0, {"Fn::Select": [ "ctlplane", {"Fn::GetAtt": [notcompute, networks]} ]} ]}, '/neutron']]}
129         NeutronNetworkType: "gre"
130         NeutronEnableTunnelling: "True"
131         NeutronNetworkVLANRanges: ""
132         NeutronBridgeMappings: ""
133         RabbitPassword: "guest"
134   NovaCompute0:
135     Type: FileInclude
136     Path: nova-compute-instance.yaml
137     SubKey: Resources.NovaCompute0
138   User:
139     Properties:
140       Policies:
141       - Ref: AccessPolicy
142     Type: AWS::IAM::User
143   notcomputeConfig:
144     Type: AWS::AutoScaling::LaunchConfiguration
145     Properties:
146       ImageId: '0'
147       InstanceType: '0'
148     Metadata:
149       OpenStack::Heat::Stack: {}
150       Openstack::ImageBuilder::Elements:
151       - boot-stack
152       - heat-cfntools
153       - heat-localip
154       - neutron-network-node
155       admin-password:
156         Ref: AdminPassword
157       admin-token:
158         Ref: AdminToken
159       bootstack:
160         public_interface_ip:
161           Ref: NeutronPublicInterfaceIP
162       cinder:
163         db: mysql://cinder:unset@localhost/cinder
164         volume_size_mb: '5000'
165         service-password:
166           Ref: CinderPassword
167       completion-handle:
168         Ref: CompletionHandle
169       controller-address:
170         Fn::Select:
171          - 0
172          - Fn::Select:
173              - 'ctlplane'
174              - Fn::GetAtt:
175                - notcompute
176                - networks
177       db-password: unset
178       glance:
179         db: mysql://glance:unset@localhost/glance
180         host:
181           Fn::Select:
182            - 0
183            - Fn::Select:
184                - 'ctlplane'
185                - Fn::GetAtt:
186                  - notcompute
187                  - networks
188         service-password:
189           Ref: GlancePassword
190       heat:
191         admin_password:
192           Ref: HeatPassword
193         admin_tenant_name: service
194         admin_user: heat
195         auth_encryption_key: unset___________
196         db: mysql://heat:unset@localhost/heat
197         heat_watch_server_url:
198           Fn::Join:
199             - ''
200             - - 'http://'
201               - Fn::Select:
202                 - 0
203                 - Fn::Select:
204                   - 'ctlplane'
205                   - Fn::GetAtt:
206                     - notcompute
207                     - networks
208               - ':8003'
209         metadata_server_url:
210           Fn::Join:
211             - ''
212             - - 'http://'
213               - Fn::Select:
214                 - 0
215                 - Fn::Select:
216                   - 'ctlplane'
217                   - Fn::GetAtt:
218                     - notcompute
219                     - networks
220               - ':8000'
221         waitcondition_server_url:
222           Fn::Join:
223             - ''
224             - - 'http://'
225               - Fn::Select:
226                 - 0
227                 - Fn::Select:
228                   - 'ctlplane'
229                   - Fn::GetAtt:
230                     - notcompute
231                     - networks
232               - ':8000/v1/waitcondition'
233       keystone:
234         db: mysql://keystone:unset@localhost/keystone
235         host:
236           Fn::Select:
237             - 0
238             - Fn::Select:
239               - 'ctlplane'
240               - Fn::GetAtt:
241                 - notcompute
242                 - networks
243       neutron:
244         host:
245           Fn::Select:
246             - 0
247             - Fn::Select:
248               - ctlplane
249               - Fn::GetAtt:
250                 - notcompute
251                 - networks
252         metadata_proxy_shared_secret: unset
253         ovs:
254           enable_tunneling: 'True'
255           local_ip:
256             Fn::Select:
257               - 0
258               - Fn::Select:
259                 - ctlplane
260                 - Fn::GetAtt:
261                   - notcompute
262                   - networks
263           public_interface:
264             Ref: NeutronPublicInterface
265           public_interface_raw_device:
266             Ref: NeutronPublicInterfaceRawDevice
267           public_interface_route:
268             Ref: NeutronPublicInterfaceDefaultRoute
269           physical_bridge: br-ex
270           tenant_network_type: gre
271         ovs_db: mysql://neutron:unset@localhost/ovs_neutron?charset=utf8
272         service-password:
273           Ref: NeutronPassword
274       nova:
275         compute_driver: libvirt.LibvirtDriver
276         db: mysql://nova:unset@localhost/nova
277         default_floating_pool:
278           ext-net
279         host:
280           Fn::Select:
281             - 0
282             - Fn::Select:
283               - 'ctlplane'
284               - Fn::GetAtt:
285                 - notcompute
286                 - networks
287         metadata-proxy: true
288         service-password:
289           Ref: NovaPassword
290       os-collect-config:
291         cfn:
292           access_key_id:
293             Ref: Key
294           path: notcomputeConfig.Metadata
295           secret_access_key:
296             Fn::GetAtt:
297             - Key
298             - SecretAccessKey
299           stack_name:
300             Ref: AWS::StackName
301       rabbit:
302         host:
303           Fn::Select:
304             - 0
305             - Fn::Select:
306               - ctlplane
307               - Fn::GetAtt:
308                 - notcompute
309                 - networks
310         password: guest
311   notcompute:
312     Type: OS::Nova::Server
313     Properties:
314       image:
315         Ref: notcomputeImage
316       flavor:
317         Ref: Flavor
318       key_name:
319         Ref: KeyName
320     Metadata:
321       os-collect-config:
322         cfn:
323           access_key_id:
324             Ref: Key
325           path: notcomputeConfig.Metadata
326           secret_access_key:
327             Fn::GetAtt:
328             - Key
329             - SecretAccessKey
330           stack_name:
331             Ref: AWS::StackName