Merge "Adding SNMPd auth credentials"
[apex-tripleo-heat-templates.git] / overcloud-source.yaml
1 Description: Nova API,Keystone,Heat Engine and API,Glance,Neutron,Dedicated MySQL
2   server,Dedicated RabbitMQ Server,Group of Nova Computes
3 HeatTemplateFormatVersion: '2012-12-12'
4 Parameters:
5   AdminPassword:
6     Default: unset
7     Description: The password for the keystone admin account, used for monitoring, querying neutron etc.
8     Type: String
9     NoEcho: true
10   AdminToken:
11     Default: unset
12     Description: The keystone auth secret.
13     Type: String
14     NoEcho: true
15   CinderPassword:
16     Default: unset
17     Description: The password for the cinder service account, used by cinder-api.
18     Type: String
19     NoEcho: true
20   CinderISCSIHelper:
21     Default: tgtadm
22     Description: The iSCSI helper to use with cinder.
23     Type: String
24   CinderLVMLoopDeviceSize:
25     Default: 5000
26     Description: The size of the loopback file used by the cinder LVM driver.
27     Type: Number
28   ExtraConfig:
29     Default: {}
30     Description: |
31       Additional configuration to inject into the cluster. The JSON should have
32       the following structure:
33         {"FILEKEY":
34           {"config":
35             [{"section": "SECTIONNAME",
36               "values":
37                 [{"option": "OPTIONNAME",
38                   "value": "VALUENAME"
39                  }
40                 ]
41              }
42             ]
43           }
44         }
45       For instance:
46         {"nova":
47           {"config":
48             [{"section": "default",
49               "values":
50                 [{"option": "compute_manager",
51                   "value": "ironic.nova.compute.manager.ClusterComputeManager"
52                  }
53                 ]
54              },
55              {"section": "cells",
56               "values":
57                 [{"option": "driver",
58                   "value": "nova.cells.rpc_driver.CellsRPCDriver"
59                  }
60                 ]
61              }
62             ]
63           }
64         }
65     Type: Json
66   OvercloudControlFlavor:
67     Default: baremetal
68     Description: Flavor for control nodes to request when deploying.
69     Type: String
70   OvercloudComputeFlavor:
71     Default: baremetal
72     Description: Flavor for compute nodes to request when deploying.
73     Type: String
74   GlancePassword:
75     Default: unset
76     Description: The password for the glance service account, used by the glance services.
77     Type: String
78     NoEcho: true
79   GlanceNotifierStrategy:
80     Description: Strategy to use for Glance notification queue
81     Type: String
82     Default: noop
83   GlanceLogFile:
84     Description: The filepath of the file to use for logging messages from Glance.
85     Type: String
86     Default: ''
87   HeatPassword:
88     Default: unset
89     Description: The password for the Heat service account, used by the Heat services.
90     Type: String
91     NoEcho: true
92   ImageUpdatePolicy:
93     Default: 'REBUILD_PRESERVE_EPHEMERAL'
94     Description: What policy to use when reconstructing instances. REBUILD for rebuilds, REBUILD_PRESERVE_EPHEMERAL to preserve /mnt.
95     Type: String
96   KeyName:
97     Default: default
98     Description: Name of an existing EC2 KeyPair to enable SSH access to the instances
99     Type: String
100   NeutronBridgeMappings:
101     Description: The OVS logical->physical bridge mappings to use.
102     Type: String
103     Default: ''
104   NeutronPassword:
105     Default: unset
106     Description: The password for the neutron service account, used by neutron agents.
107     Type: String
108     NoEcho: true
109   CeilometerComputeAgent:
110     Description: Indicates whether the Compute agent is present and expects nova-compute to be configured accordingly
111     Type: String
112     Default: ''
113     AllowedValues: ['', Present]
114   CeilometerMeteringSecret:
115     Default: unset
116     Description: Secret shared by the ceilometer services.
117     Type: String
118     NoEcho: true
119   CeilometerPassword:
120     Default: unset
121     Description: The password for the ceilometer service account.
122     Type: String
123     NoEcho: true
124   SnmpdReadonlyUserName:
125     Default: ro_snmp_user
126     Description: The user name for SNMPd with readonly rights running on all Overcloud nodes
127     Type: String
128   SnmpdReadonlyUserPassword:
129     Default: unset
130     Description: The user password for SNMPd with readonly rights running on all Overcloud nodes
131     Type: String
132     NoEcho: true
133   CloudName:
134     Default: ''
135     Description: The DNS name of this cloud. E.g. ci-overcloud.tripleo.org
136     Type: String
137   NovaComputeDriver:
138     Default: libvirt.LibvirtDriver
139     Type: String
140   NovaComputeLibvirtType:
141     Default: ''
142     Type: String
143   NovaImage:
144     Type: String
145     Default: overcloud-compute
146   NovaPassword:
147     Default: unset
148     Description: The password for the nova service account, used by nova-api.
149     Type: String
150     NoEcho: true
151   NeutronFlatNetworks:
152     Type: String
153     Default: ''
154     Description: If set, flat networks to configure in neutron plugins.
155   HypervisorNeutronPhysicalBridge:
156     Default: ''
157     Description: An OVS bridge to create on each hypervisor.
158     Type: String
159   HypervisorNeutronPublicInterface:
160     Default: ''
161     Description: What interface to add to the HypervisorNeutronPhysicalBridge.
162     Type: String
163   NeutronPublicInterface:
164     Default: eth0
165     Description: What interface to bridge onto br-ex for network nodes.
166     Type: String
167   NeutronPublicInterfaceDefaultRoute:
168     Default: ''
169     Description: A custom default route for the NeutronPublicInterface.
170     Type: String
171   NeutronPublicInterfaceIP:
172     Default: ''
173     Description: A custom IP address to put onto the NeutronPublicInterface.
174     Type: String
175   NeutronPublicInterfaceRawDevice:
176     Default: ''
177     Description: If set, the public interface is a vlan with this device as the raw device.
178     Type: String
179   NeutronControlPlaneID:
180     Default: ''
181     Type: String
182     Description: Neutron ID for ctlplane network.
183   NeutronDnsmasqOptions:
184     Default: 'dhcp-option-force=26,1400'
185     Description: Dnsmasq options for neutron-dhcp-agent. The default value here forces MTU to be set to 1400 to account for the gre tunnel overhead.
186     Type: String
187   controllerImage:
188     Type: String
189     Default: overcloud-control
190   NtpServer:
191     Type: String
192     Default: ''
193   RabbitUserName:
194     Default: guest
195     Description: The username for RabbitMQ
196     Type: String
197   RabbitPassword:
198     Default: guest
199     Description: The password for RabbitMQ
200     Type: String
201     NoEcho: true
202   RabbitCookieSalt:
203     Type: String
204     Default: unset
205     Description: Salt for the rabbit cookie, change this to force the randomly generated rabbit cookie to change.
206   HeatStackDomainAdminPassword:
207     Description: Password for heat_domain_admin user.
208     Type: String
209     Default: ''
210     NoEcho: true
211   LiveUpdateUserName:
212     Type: String
213     Description: The live-update username for the undercloud Glance API.
214     Default: ''
215   LiveUpdateTenantName:
216     Type: String
217     Description: The live-update tenant name for the undercloud Glance API.
218     Default: ''
219   LiveUpdateHost:
220     Type: String
221     Description: The IP address for the undercloud Glance API.
222     Default: ''
223   LiveUpdatePassword:
224     Type: String
225     Default: ''
226     Description: The live-update password for the undercloud Glance API.
227     NoEcho: true
228   LiveUpdateComputeImage:
229     Type: String
230     Description: The image ID for live-updates to the overcloud compute nodes.
231     Default: ''
232   MysqlInnodbBufferPoolSize:
233     Description: >
234         Specifies the size of the buffer pool in megabytes. Setting to
235         zero should be interpreted as "no value" and will defer to the
236         lower level default.
237     Type: Number
238     Default: 0
239   ControlVirtualInterface:
240     Default: 'br-ex'
241     Description: Interface where virtual ip will be assigned.
242     Type: String
243   ControlFixedIPs:
244     Default: []
245     Description: Should be used for arbitrary ips.
246     Type: Json
247 Resources:
248   ControlVirtualIP:
249     Type: OS::Neutron::Port
250     Properties:
251       name: control_virtual_ip
252       network_id: {Ref: NeutronControlPlaneID}
253       fixed_ips:
254         Ref: ControlFixedIPs
255   RabbitCookie:
256     Type: OS::Heat::RandomString
257     Properties:
258       length: 20
259       salt:
260         Ref: RabbitCookieSalt
261   NovaCompute0Config:
262     Type: FileInclude
263     Path: nova-compute-instance.yaml
264     SubKey: Resources.NovaCompute0Deploy
265     Parameters:
266         NovaApiHost: {"Fn::Select": [ 0, {"Fn::Select": [ "ctlplane", {"Fn::GetAtt": [controller0, networks]} ]} ] }
267         KeystoneHost: {"Fn::Select": [ 0, {"Fn::Select": [ "ctlplane", {"Fn::GetAtt": [controller0, networks]} ]} ] }
268         RabbitHost: {"Fn::Select": [ 0, {"Fn::Select": [ "ctlplane", {"Fn::GetAtt": [controller0, networks]} ]} ] }
269         NeutronHost: {"Fn::Select": [ 0, {"Fn::Select": [ "ctlplane", {"Fn::GetAtt": [controller0, networks]} ]} ] }
270         GlanceHost: {"Fn::Select": [ 0, {"Fn::Select": [ "ctlplane", {"Fn::GetAtt": [controller0, networks]} ]} ] }
271         NovaDSN: {"Fn::Join": ['', ['mysql://nova:unset@', {"Fn::Select": [ 0, {"Fn::Select": [ "ctlplane", {"Fn::GetAtt": [controller0, networks]} ]} ]}, '/nova']]}
272         CeilometerDSN: {"Fn::Join": ['', ['mysql://ceilometer:unset@', {"Fn::Select": [ 0, {"Fn::Select": [ "ctlplane", {"Fn::GetAtt": [controller0, networks]} ]} ]}, '/ceilometer']]}
273         NeutronDSN: {"Fn::Join": ['', ['mysql://neutron:unset@', {"Fn::Select": [ 0, {"Fn::Select": [ "ctlplane", {"Fn::GetAtt": [controller0, networks]} ]} ]}, '/neutron']]}
274         NeutronNetworkType: "gre"
275         NeutronEnableTunnelling: "True"
276         NeutronFlatNetworks:
277             Ref: NeutronFlatNetworks
278         NeutronNetworkVLANRanges: ""
279         NeutronPhysicalBridge:
280             Ref: HypervisorNeutronPhysicalBridge
281         NeutronPublicInterface:
282             Ref: HypervisorNeutronPublicInterface
283         NeutronBridgeMappings:
284             Ref: NeutronBridgeMappings
285         StaticHosts:
286           Fn::Join:
287           - "\n"
288           - - Fn::Join:
289               - "\n"
290               - Merge::Map:
291                   NovaCompute0:
292                     Fn::Join:
293                     - ' '
294                     - - Fn::Select:
295                         - 0
296                         - Fn::Select:
297                           - ctlplane
298                           - Fn::GetAtt:
299                             - NovaCompute0
300                             - networks
301                       - Fn::Select:
302                         - name
303                         - Fn::GetAtt:
304                           - NovaCompute0
305                           - show
306                       - Fn::Join:
307                         - '.'
308                         - - Fn::Select:
309                             - name
310                             - Fn::GetAtt:
311                               - NovaCompute0
312                               - show
313                           - 'novalocal'
314             - Fn::Join:
315               - "\n"
316               - Merge::Map:
317                   controller0:
318                     Fn::Join:
319                     - ' '
320                     - - Fn::Select:
321                         - 0
322                         - Fn::Select:
323                           - ctlplane
324                           - Fn::GetAtt:
325                             - controller0
326                             - networks
327                       - Fn::Select:
328                         - name
329                         - Fn::GetAtt:
330                           - controller0
331                           - show
332                       - Fn::Join:
333                         - '.'
334                         - - Fn::Select:
335                             - name
336                             - Fn::GetAtt:
337                               - controller0
338                               - show
339                           - 'novalocal'
340                       - {Ref: CloudName}
341   NovaCompute0Passthrough:
342     Type: OS::Heat::StructuredDeployment
343     Properties:
344       config: {Ref: NovaComputePassthrough}
345       server: {Ref: NovaCompute0}
346       signal_transport: NO_SIGNAL
347       input_values:
348         passthrough_config: {Ref: ExtraConfig}
349   NovaCompute0:
350     Type: FileInclude
351     Path: nova-compute-instance.yaml
352     SubKey: Resources.NovaCompute0
353   controllerConfig:
354     Type: OS::Heat::StructuredConfig
355     Properties:
356       config:
357         completion-signal: {get_input: deploy_signal_id}
358         admin-password:
359           Ref: AdminPassword
360         admin-token:
361           Ref: AdminToken
362         bootstack:
363           public_interface_ip:
364             Ref: NeutronPublicInterfaceIP
365         cinder:
366           db: mysql://cinder:unset@localhost/cinder
367           volume_size_mb:
368             Ref: CinderLVMLoopDeviceSize
369           service-password:
370             Ref: CinderPassword
371           iscsi-helper:
372             Ref: CinderISCSIHelper
373         controller-address:
374           get_input: controller_host
375         db-password: unset
376         glance:
377           backend: swift
378           db: mysql://glance:unset@localhost/glance
379           host:
380             get_input: controller_host
381           service-password:
382             Ref: GlancePassword
383           swift-store-user: service:glance
384           swift-store-key:
385             Ref: GlancePassword
386           notifier-strategy:
387             Ref: GlanceNotifierStrategy
388           log-file:
389             Ref: GlanceLogFile
390         heat:
391           admin_password:
392             Ref: HeatPassword
393           admin_tenant_name: service
394           admin_user: heat
395           auth_encryption_key: unset___________
396           db: mysql://heat:unset@localhost/heat
397           stack_domain_admin_password: {Ref: HeatStackDomainAdminPassword}
398           watch_server_url: {get_input: heat.watch_server_url}
399           metadata_server_url: {get_input: heat.metadata_server_url}
400           waitcondition_server_url: {get_input: heat.waitcondition_server_url}
401         hosts: {get_input: hosts}
402         keystone:
403           db: mysql://keystone:unset@localhost/keystone
404           host:
405             get_input: controller_host
406         mysql:
407           innodb_buffer_pool_size: {Ref: MysqlInnodbBufferPoolSize}
408         neutron:
409           flat-networks: {Ref: NeutronFlatNetworks}
410           host:
411             get_input: controller_host
412           metadata_proxy_shared_secret: unset
413           ovs:
414             enable_tunneling: 'True'
415             local_ip:
416               get_input: controller_host
417             bridge_mappings: {Ref: NeutronBridgeMappings}
418             public_interface:
419               Ref: NeutronPublicInterface
420             public_interface_raw_device:
421               Ref: NeutronPublicInterfaceRawDevice
422             public_interface_route:
423               Ref: NeutronPublicInterfaceDefaultRoute
424             physical_bridge: br-ex
425             tenant_network_type: gre
426           ovs_db: mysql://neutron:unset@localhost/ovs_neutron?charset=utf8
427           service-password:
428             Ref: NeutronPassword
429           dnsmasq-options:
430             Ref: NeutronDnsmasqOptions
431         ceilometer:
432           db: mysql://ceilometer:unset@localhost/ceilometer
433           metering_secret: {Ref: CeilometerMeteringSecret}
434           service-password:
435             Ref: CeilometerPassword
436         snmpd:
437           export_MIB: UCD-SNMP-MIB
438           readonly_user_name:
439             Ref: SnmpdReadonlyUserName
440           readonly_user_password:
441             Ref: SnmpdReadonlyUserPassword
442         nova:
443           compute_driver: libvirt.LibvirtDriver
444           db: mysql://nova:unset@localhost/nova
445           default_floating_pool:
446             ext-net
447           host:
448             get_input: controller_host
449           metadata-proxy: true
450           service-password:
451             Ref: NovaPassword
452         rabbit:
453           host:
454             get_input: controller_host
455           username:
456             Ref: RabbitUserName
457           password:
458             Ref: RabbitPassword
459           cookie:
460             Fn::GetAtt:
461             - RabbitCookie
462             - value
463         ntp:
464           servers:
465               - {server: {Ref: NtpServer}, fudge: "stratum 0"}
466         keepalived:
467           keepalive_interface:
468             Ref: NeutronPublicInterface
469           priority: 101
470         virtual_ips:
471             -
472               ip: {'Fn::Select': [ip_address, 'Fn::Select': [0, 'Fn::GetAtt': [ControlVirtualIP, fixed_ips]]]}
473               interface:
474                 Ref: ControlVirtualInterface
475   controllerPassthrough:
476     Type: OS::Heat::StructuredConfig
477     Properties:
478       config: {get_input: passthrough_config}
479   controller0:
480     Type: OS::Nova::Server
481     Properties:
482       image:
483         Ref: controllerImage
484       image_update_policy:
485         Ref: ImageUpdatePolicy
486       flavor:
487         Ref: OvercloudControlFlavor
488       key_name:
489         Ref: KeyName
490       user_data_format: SOFTWARE_CONFIG
491   controller0Deployment:
492     Type: OS::Heat::StructuredDeployment
493     Properties:
494       config: {Ref: controllerConfig}
495       server: {Ref: controller0}
496       input_values:
497         controller_host:
498           Fn::Select:
499             - 0
500             - Fn::Select:
501               - ctlplane
502               - Fn::GetAtt:
503                 - controller0
504                 - networks
505         heat.watch_server_url:
506           Fn::Join:
507             - ''
508             - - 'http://'
509               - {"Fn::Select": [ 0, "Fn::Select": [ ctlplane, { "Fn::GetAtt": [ controller0, networks ]}]]}
510               - ':8003'
511         heat.metadata_server_url:
512           Fn::Join:
513             - ''
514             - - 'http://'
515               - {"Fn::Select": [ 0, "Fn::Select": [ ctlplane, { "Fn::GetAtt": [ controller0, networks ]}]]}
516               - ':8000'
517         heat.waitcondition_server_url:
518           Fn::Join:
519             - ''
520             - - 'http://'
521               - {"Fn::Select": [ 0, "Fn::Select": [ ctlplane, { "Fn::GetAtt": [ controller0, networks ]}]]}
522               - ':8000/v1/waitcondition'
523         hosts:
524           Fn::Join:
525           - "\n"
526           - - Fn::Join:
527               - "\n"
528               - Merge::Map:
529                   NovaCompute0:
530                     Fn::Join:
531                     - ' '
532                     - - Fn::Select:
533                         - 0
534                         - Fn::Select:
535                           - ctlplane
536                           - Fn::GetAtt:
537                             - NovaCompute0
538                             - networks
539                       - Fn::Select:
540                         - name
541                         - Fn::GetAtt:
542                           - NovaCompute0
543                           - show
544                       - Fn::Join:
545                         - '.'
546                         - - Fn::Select:
547                             - name
548                             - Fn::GetAtt:
549                               - NovaCompute0
550                               - show
551                           - 'novalocal'
552             - Fn::Join:
553               - "\n"
554               - Merge::Map:
555                   controller0:
556                     Fn::Join:
557                     - ' '
558                     - - Fn::Select:
559                         - 0
560                         - Fn::Select:
561                           - ctlplane
562                           - Fn::GetAtt:
563                             - controller0
564                             - networks
565                       - Fn::Select:
566                         - name
567                         - Fn::GetAtt:
568                           - controller0
569                           - show
570                       - Fn::Join:
571                         - '.'
572                         - - Fn::Select:
573                             - name
574                             - Fn::GetAtt:
575                               - controller0
576                               - show
577                           - 'novalocal'
578                       - {Ref: CloudName}
579   controller0SSLDeployment:
580     Type: OS::Heat::StructuredDeployment
581     Properties:
582       config: {Ref: SSLConfig}
583       server: {Ref: controller0}
584       signal_transport: NO_SIGNAL
585       input_values:
586         ssl_certificate: {Ref: SSLCertificate}
587         ssl_key: {Ref: SSLKey}
588   controller0Passthrough:
589     Type: OS::Heat::StructuredDeployment
590     Properties:
591       config: {Ref: controllerPassthrough}
592       server: {Ref: controller0}
593       signal_transport: NO_SIGNAL
594       input_values:
595         passthrough_config: {Ref: ExtraConfig}
596 Outputs:
597   KeystoneURL:
598     Description: URL for the Overcloud Keystone service
599     Value:
600       Fn::Join:
601       - ''
602       - - http://
603         - Fn::Select:
604           - 0
605           - Fn::Select:
606             - ctlplane
607             - Fn::GetAtt:
608               - controller0
609               - networks
610         - :5000/v2.0/