prototypes/puppet-infracloud/manifests/site.pp

   1 # SPDX-license-identifier: Apache-2.0
   2 ##############################################################################
   3 # Copyright (c) 2016 RedHat and others.
   4 # All rights reserved. This program and the accompanying materials
   5 # are made available under the terms of the Apache License, Version 2.0
   6 # which accompanies this distribution, and is available at
   7 # http://www.apache.org/licenses/LICENSE-2.0
   8 ##############################################################################
   9 node 'controller00.opnfvlocal' {
  10   $group = 'infracloud'
  11   include ::sudoers
  12
  13   class { 'opnfv::server':
  14     iptables_public_tcp_ports => [80,5000,5671,8774,9292,9696,35357], # logs,keystone,rabbit,nova,glance,neutron,keystone
  15     sysadmins                 => hiera('sysadmins', []),
  16     enable_unbound            => false,
  17     purge_apt_sources         => false,
  18   }
  19   class { 'opnfv::controller':
  20     keystone_rabbit_password         => hiera('keystone_rabbit_password'),
  21     neutron_rabbit_password          => hiera('neutron_rabbit_password'),
  22     nova_rabbit_password             => hiera('nova_rabbit_password'),
  23     root_mysql_password              => hiera('infracloud_mysql_password'),
  24     keystone_mysql_password          => hiera('keystone_mysql_password'),
  25     glance_mysql_password            => hiera('glance_mysql_password'),
  26     neutron_mysql_password           => hiera('neutron_mysql_password'),
  27     nova_mysql_password              => hiera('nova_mysql_password'),
  28     keystone_admin_password          => hiera('keystone_admin_password'),
  29     glance_admin_password            => hiera('glance_admin_password'),
  30     neutron_admin_password           => hiera('neutron_admin_password'),
  31     nova_admin_password              => hiera('nova_admin_password'),
  32     keystone_admin_token             => hiera('keystone_admin_token'),
  33     ssl_key_file_contents            => hiera('ssl_key_file_contents'),
  34     ssl_cert_file_contents           => hiera('ssl_cert_file_contents'),
  35     br_name                          => hiera('bridge_name'),
  36     controller_public_address        => $::fqdn,
  37     neutron_subnet_cidr              => hiera('neutron_subnet_cidr'),
  38     neutron_subnet_gateway           => hiera('neutron_subnet_gateway'),
  39     neutron_subnet_allocation_pools  => hiera('neutron_subnet_allocation_pools'),
  40     opnfv_password                   => hiera('opnfv_password'),
  41   }
  42 }
  43
  44 node 'compute00.opnfvlocal' {
  45   $group = 'infracloud'
  46   include ::sudoers
  47
  48   class { 'opnfv::server':
  49     sysadmins                 => hiera('sysadmins', []),
  50     enable_unbound            => false,
  51     purge_apt_sources         => false,
  52   }
  53
  54   class { 'opnfv::compute':
  55     nova_rabbit_password             => hiera('nova_rabbit_password'),
  56     neutron_rabbit_password          => hiera('neutron_rabbit_password'),
  57     neutron_admin_password           => hiera('neutron_admin_password'),
  58     ssl_cert_file_contents           => hiera('ssl_cert_file_contents'),
  59     ssl_key_file_contents            => hiera('ssl_key_file_contents'),
  60     br_name                          => hiera('bridge_name'),
  61     controller_public_address        => 'controller00.opnfvlocal',
  62     virt_type                        => hiera('virt_type'),
  63   }
  64 }
  65
  66 node 'jumphost.opnfvlocal' {
  67   class { 'opnfv::server':
  68     sysadmins                 => hiera('sysadmins', []),
  69     enable_unbound            => false,
  70     purge_apt_sources         => false,
  71   }
  72 }
  73
  74 node 'baremetal.opnfvlocal', 'lfpod5-jumpserver' {
  75   class { '::opnfv::server':
  76     iptables_public_udp_ports => [67, 69],
  77     sysadmins                 => hiera('sysadmins', []),
  78     enable_unbound            => false,
  79     purge_apt_sources         => false,
  80   }
  81
  82   class { '::infracloud::bifrost':
  83     ironic_inventory          => hiera('ironic_inventory', {}),
  84     ironic_db_password        => hiera('ironic_db_password'),
  85     mysql_password            => hiera('bifrost_mysql_password'),
  86     ipmi_passwords            => hiera('ipmi_passwords'),
  87     ssh_private_key           => hiera('bifrost_ssh_private_key'),
  88     ssh_public_key            => hiera('bifrost_ssh_public_key'),
  89     vlan                      => hiera('infracloud_vlan'),
  90     gateway_ip                => hiera('infracloud_gateway_ip'),
  91     default_network_interface => hiera('default_network_interface'),
  92     dhcp_static_mask          => hiera('dhcp_static_mask'),
  93     dhcp_pool_start           => hiera('dhcp_pool_start'),
  94     dhcp_pool_end             => hiera('dhcp_pool_end'),
  95     network_interface         => hiera('network_interface'),
  96     ipv4_nameserver           => hiera('ipv4_nameserver'),
  97     ipv4_subnet_mask          => hiera('ipv4_subnet_mask'),
  98     bridge_name               => hiera('bridge_name'),
  99   }
 100 }