1 heat_template_version: 2015-04-30
4 OpenStack controller node configured by Puppet.
9 description: The password for the keystone admin account, used for monitoring, querying neutron etc.
14 description: The keystone auth secret and db password.
19 description: The ceilometer backend type.
21 CeilometerMeteringSecret:
23 description: Secret shared by the ceilometer services.
28 description: The password for the ceilometer service and db account.
31 CinderEnableIscsiBackend:
33 description: Whether to enable or not the Iscsi backend for Cinder
35 CinderEnableRbdBackend:
37 description: Whether to enable or not the Rbd backend for Cinder
41 description: The iSCSI helper to use with cinder.
43 CinderLVMLoopDeviceSize:
45 description: The size of the loopback file used by the cinder LVM driver.
49 description: The password for the cinder service and db account, used by cinder-api.
54 description: The DNS name of this cloud. E.g. ci-overcloud.tripleo.org
56 ControllerExtraConfig:
59 Controller specific configuration to inject into the cluster. Same
60 structure as ExtraConfig.
62 ControlVirtualInterface:
64 description: Interface where virtual ip will be assigned.
68 description: Set to True to enable debugging on all services.
72 description: Whether to use Galera instead of regular MariaDB.
76 description: If enabled services will be monitored by Pacemaker; it
77 will manage VIPs as well, in place of Keepalived.
81 description: Whether to deploy Ceph Storage (OSD) on the Controller
85 description: Whether to enable Swift Storage on the Controller
90 Additional configuration to inject into the cluster. The JSON should have
91 the following structure:
94 [{"section": "SECTIONNAME",
96 [{"option": "OPTIONNAME",
107 [{"section": "default",
109 [{"option": "compute_manager",
110 "value": "ironic.nova.compute.manager.ClusterComputeManager"
116 [{"option": "driver",
117 "value": "nova.cells.rpc_driver.CellsRPCDriver"
126 description: Flavor for control nodes to request when deploying.
129 - custom_constraint: nova.flavor
130 GlanceNotifierStrategy:
131 description: Strategy to use for Glance notification queue
135 description: The filepath of the file to use for logging messages from Glance.
140 description: The password for the glance service and db account, used by the glance services.
145 description: Glance port.
149 description: Protocol to use when connecting to glance, set to https for SSL.
153 description: The short name of the Glance backend to use. Should be one
154 of swift, rbd, or file
157 - allowed_values: ['swift', 'file', 'rbd']
160 description: The password for the Heat service and db account, used by the Heat services.
163 HeatStackDomainAdminPassword:
164 description: Password for heat_domain_admin user.
168 HeatAuthEncryptionKey:
169 description: Auth encryption key for heat-engine
172 description: Secret key for Django
176 default: overcloud-control
178 - custom_constraint: glance.image
180 default: 'REBUILD_PRESERVE_EPHEMERAL'
181 description: What policy to use when reconstructing instances. REBUILD for rebuilds, REBUILD_PRESERVE_EPHEMERAL to preserve /mnt.
185 description: Name of an existing EC2 KeyPair to enable SSH access to the instances
188 - custom_constraint: nova.keypair
189 KeystoneCACertificate:
191 description: Keystone self-signed certificate authority certificate.
193 KeystoneSigningCertificate:
195 description: Keystone certificate for verifying token validity.
199 description: Keystone key for signing tokens.
202 KeystoneSSLCertificate:
204 description: Keystone certificate for verifying token validity.
206 KeystoneSSLCertificateKey:
208 description: Keystone key for signing tokens.
211 MysqlClusterUniquePart:
212 description: A unique identifier of the MySQL cluster the controller is in.
214 default: 'unset' # Has to be here because of the ignored empty value bug
215 # Drop the validation: https://bugs.launchpad.net/tripleo/+bug/1405446
217 # - length: {min: 4, max: 10}
218 MysqlInnodbBufferPoolSize:
220 Specifies the size of the buffer pool in megabytes. Setting to
221 zero should be interpreted as "no value" and will defer to the
228 default: '' # Has to be here because of the ignored empty value bug
229 NeutronBridgeMappings:
231 The OVS logical->physical bridge mappings to use. See the Neutron
232 documentation for details. Defaults to mapping br-ex - the external
233 bridge on hosts - to a physical name 'datacentre' which can be used
234 to create provider networks (and we use this for the default floating
235 network) - if changing this either use different post-install network
236 scripts or be sure to keep 'datacentre' as a mapping network name.
238 default: "datacentre:br-ex"
239 NeutronDnsmasqOptions:
240 default: 'dhcp-option-force=26,1400'
241 description: Dnsmasq options for neutron-dhcp-agent. The default value here forces MTU to be set to 1400 to account for the gre tunnel overhead.
245 description: Agent mode for the neutron-l3-agent on the controller hosts
249 description: Whether to enable l3-agent HA
253 description: Whether to configure Neutron Distributed Virtual Routers
255 NeutronMetadataProxySharedSecret:
257 description: Shared secret to prevent spoofing
259 NeutronMechanismDrivers:
260 default: 'openvswitch'
262 The mechanism drivers for the Neutron tenant network. To specify multiple
263 values, use a comma separated string, like so: 'openvswitch,l2_population'
265 NeutronAllowL3AgentFailover:
267 description: Allow automatic l3-agent failover
269 NeutronEnableTunnelling:
274 default: 'datacentre'
275 description: If set, flat networks to configure in neutron plugins.
278 description: Whether to enable l3-agent HA
282 description: The tenant network type for Neutron, either gre or vxlan.
284 NeutronNetworkVLANRanges:
285 default: 'datacentre'
287 The Neutron ML2 and OpenVSwitch vlan mapping range to support. See the
288 Neutron documentation for permitted values. Defaults to permitting any
289 VLAN on the 'datacentre' physical network (See NeutronBridgeMappings).
293 description: The password for the neutron service and db account, used by neutron agents.
296 NeutronPublicInterface:
298 description: What interface to bridge onto br-ex for network nodes.
300 NeutronPublicInterfaceTag:
303 VLAN tag for creating a public VLAN. The tag will be used to
304 create an access port on the exterior bridge for each control plane node,
305 and that port will be given the IP address returned by neutron from the
306 public network. Set CONTROLEXTRA=overcloud-vlan-port.yaml when compiling
307 overcloud.yaml to include the deployment of VLAN ports to the control
310 NeutronPublicInterfaceDefaultRoute:
312 description: A custom default route for the NeutronPublicInterface.
314 NeutronPublicInterfaceIP:
316 description: A custom IP address to put onto the NeutronPublicInterface.
318 NeutronPublicInterfaceRawDevice:
320 description: If set, the public interface is a vlan with this device as the raw device.
325 The tunnel types for the Neutron tenant network. To specify multiple
326 values, use a comma separated string, like so: 'gre,vxlan'
330 description: The password for the nova service and db account, used by nova-api.
338 description: The password for the 'pcsd' user.
339 PublicVirtualInterface:
342 Specifies the interface where the public-facing virtual ip will be assigned.
343 This should be int_public when a VLAN is being used.
345 PublicVirtualIP: # DEPRECATED: use per service settings instead
347 default: '' # Has to be here because of the ignored empty value bug
350 default: '' # Has to be here because of the ignored empty value bug
354 description: The password for RabbitMQ
359 description: The username for RabbitMQ
364 Rabbit client subscriber parameter to specify
365 an SSL connection to the RabbitMQ host.
369 description: Set rabbit subscriber port, change this if using SSL
371 SnmpdReadonlyUserName:
372 default: ro_snmp_user
373 description: The user name for SNMPd with readonly rights running on all Overcloud nodes
375 SnmpdReadonlyUserPassword:
377 description: The user password for SNMPd with readonly rights running on all Overcloud nodes
382 description: If set, the contents of an SSL certificate authority file.
386 description: If set, the contents of an SSL certificate .crt file for encrypting SSL endpoints.
391 description: If set, the contents of an SSL certificate .key file for encrypting SSL endpoints.
396 description: A random string to be used as a salt when hashing to determine mappings
402 description: Value of mount_check in Swift account/container/object -server.conf
407 description: The minimum time (in hours) before a partition in a ring can be moved following a rebalance.
410 description: Partition Power to use when building Swift rings
414 description: The password for the swift service account, used by the swift proxy
421 description: How many replicas to use in the swift rings.
422 VirtualIP: # DEPRECATED: use per service settings instead
424 default: '' # Has to be here because of the ignored empty value bug
434 KeystonePublicApiVirtualIP:
440 EnablePackageInstall:
442 description: Set to true to enable package installation via Puppet
446 description: Mapping of service_name -> network name. Typically set
447 via parameter_defaults in the resource registry.
453 type: OS::Nova::Server
455 image: {get_param: Image}
456 image_update_policy: {get_param: ImageUpdatePolicy}
457 flavor: {get_param: Flavor}
458 key_name: {get_param: KeyName}
461 user_data_format: SOFTWARE_CONFIG
462 user_data: {get_resource: NodeUserData}
465 type: OS::TripleO::NodeUserData
468 type: OS::TripleO::Controller::Ports::ExternalPort
470 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
473 type: OS::TripleO::Controller::Ports::InternalApiPort
475 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
478 type: OS::TripleO::Controller::Ports::StoragePort
480 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
483 type: OS::TripleO::Controller::Ports::StorageMgmtPort
485 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
488 type: OS::TripleO::Controller::Ports::TenantPort
490 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
493 type: OS::TripleO::Network::Ports::NetIpMap
495 ExternalIp: {get_attr: [ExternalPort, ip_address]}
496 InternalApiIp: {get_attr: [InternalApiPort, ip_address]}
497 StorageIp: {get_attr: [StoragePort, ip_address]}
498 StorageMgmtIp: {get_attr: [StorageMgmtPort, ip_address]}
499 TenantIp: {get_attr: [TenantPort, ip_address]}
502 type: OS::TripleO::Controller::Net::SoftwareConfig
504 ExternalIpSubnet: {get_attr: [ExternalPort, ip_subnet]}
505 InternalApiIpSubnet: {get_attr: [InternalApiPort, ip_subnet]}
506 StorageIpSubnet: {get_attr: [StoragePort, ip_subnet]}
507 StorageMgmtIpSubnet: {get_attr: [StorageMgmtPort, ip_subnet]}
508 TenantIpSubnet: {get_attr: [TenantPort, ip_subnet]}
511 type: OS::TripleO::SoftwareDeployment
513 signal_transport: NO_SIGNAL
514 config: {get_resource: NetworkConfig}
515 server: {get_resource: Controller}
518 interface_name: {get_param: NeutronPublicInterface}
520 ControllerDeployment:
521 type: OS::TripleO::SoftwareDeployment
523 signal_transport: NO_SIGNAL
524 config: {get_resource: ControllerConfig}
525 server: {get_resource: Controller}
527 bootstack_nodeid: {get_attr: [Controller, name]}
528 neutron_enable_tunneling: {get_param: NeutronEnableTunnelling}
529 heat.watch_server_url:
533 - {get_param: HeatApiVirtualIP}
535 heat.metadata_server_url:
539 - {get_param: HeatApiVirtualIP}
541 heat.waitcondition_server_url:
545 - {get_param: HeatApiVirtualIP}
546 - ':8000/v1/waitcondition'
547 heat_auth_encryption_key: {get_param: HeatAuthEncryptionKey}
548 horizon_secret: {get_param: HorizonSecret}
549 admin_password: {get_param: AdminPassword}
550 admin_token: {get_param: AdminToken}
551 neutron_public_interface_ip: {get_param: NeutronPublicInterfaceIP}
552 debug: {get_param: Debug}
553 cinder_enable_rbd_backend: {get_param: CinderEnableRbdBackend}
554 cinder_lvm_loop_device_size: {get_param: CinderLVMLoopDeviceSize}
555 cinder_password: {get_param: CinderPassword}
556 cinder_enable_iscsi_backend: {get_param: CinderEnableIscsiBackend}
557 cinder_iscsi_helper: {get_param: CinderISCSIHelper}
561 - - 'mysql://cinder:'
562 - {get_param: CinderPassword}
564 - {get_param: MysqlVirtualIP}
566 glance_port: {get_param: GlancePort}
567 glance_password: {get_param: GlancePassword}
568 glance_backend: {get_param: GlanceBackend}
569 glance_notifier_strategy: {get_param: GlanceNotifierStrategy}
570 glance_log_file: {get_param: GlanceLogFile}
574 - - 'mysql://glance:'
575 - {get_param: GlancePassword}
577 - {get_param: MysqlVirtualIP}
579 heat_password: {get_param: HeatPassword}
580 heat_stack_domain_admin_password: {get_param: HeatStackDomainAdminPassword}
585 - {get_param: HeatPassword}
587 - {get_param: MysqlVirtualIP}
589 keystone_auth_address: {list_join: ['', ['http://', {get_param: KeystonePublicApiVirtualIP} , ':5000/v2.0']]}
590 keystone_ca_certificate: {get_param: KeystoneCACertificate}
591 keystone_signing_key: {get_param: KeystoneSigningKey}
592 keystone_signing_certificate: {get_param: KeystoneSigningCertificate}
593 keystone_ssl_certificate: {get_param: KeystoneSSLCertificate}
594 keystone_ssl_certificate_key: {get_param: KeystoneSSLCertificateKey}
598 - - 'mysql://keystone:'
599 - {get_param: AdminToken}
601 - {get_param: MysqlVirtualIP}
603 keystone_identity_uri:
607 - {get_param: KeystonePublicApiVirtualIP}
613 - {get_param: KeystonePublicApiVirtualIP}
615 enable_galera: {get_param: EnableGalera}
616 enable_ceph_storage: {get_param: EnableCephStorage}
617 enable_swift_storage: {get_param: EnableSwiftStorage}
618 mysql_innodb_buffer_pool_size: {get_param: MysqlInnodbBufferPoolSize}
619 mysql_root_password: {get_param: MysqlRootPassword}
622 template: tripleo-CLUSTER
624 CLUSTER: {get_param: MysqlClusterUniquePart}
625 neutron_flat_networks: {get_param: NeutronFlatNetworks}
626 neutron_metadata_proxy_shared_secret: {get_param: NeutronMetadataProxySharedSecret}
627 neutron_agent_mode: {get_param: NeutronAgentMode}
628 neutron_router_distributed: {get_param: NeutronDVR}
629 neutron_mechanism_drivers: {get_param: NeutronMechanismDrivers}
630 neutron_allow_l3agent_failover: {get_param: NeutronAllowL3AgentFailover}
631 neutron_l3_ha: {get_param: NeutronL3HA}
632 neutron_network_vlan_ranges: {get_param: NeutronNetworkVLANRanges}
633 neutron_bridge_mappings: {get_param: NeutronBridgeMappings}
634 neutron_public_interface: {get_param: NeutronPublicInterface}
635 neutron_public_interface_raw_device: {get_param: NeutronPublicInterfaceRawDevice}
636 neutron_public_interface_default_route: {get_param: NeutronPublicInterfaceDefaultRoute}
637 neutron_public_interface_tag: {get_param: NeutronPublicInterfaceTag}
638 neutron_tenant_network_type: {get_param: NeutronNetworkType}
639 neutron_tunnel_types: {get_param: NeutronTunnelTypes}
640 neutron_password: {get_param: NeutronPassword}
641 neutron_dnsmasq_options: {get_param: NeutronDnsmasqOptions}
645 - - 'mysql://neutron:'
646 - {get_param: NeutronPassword}
648 - {get_param: MysqlVirtualIP}
649 - '/ovs_neutron?charset=utf8'
654 - {get_param: NeutronApiVirtualIP}
656 neutron_admin_auth_url:
660 - {get_param: KeystonePublicApiVirtualIP}
662 ceilometer_backend: {get_param: CeilometerBackend}
663 ceilometer_metering_secret: {get_param: CeilometerMeteringSecret}
664 ceilometer_password: {get_param: CeilometerPassword}
668 - - 'mysql://ceilometer:unset@'
669 - {get_param: MysqlVirtualIP}
671 snmpd_readonly_user_name: {get_param: SnmpdReadonlyUserName}
672 snmpd_readonly_user_password: {get_param: SnmpdReadonlyUserPassword}
673 nova_password: {get_param: NovaPassword}
678 - {get_param: NovaPassword}
680 - {get_param: MysqlVirtualIP}
682 pcsd_password: {get_param: PcsdPassword}
683 rabbit_username: {get_param: RabbitUserName}
684 rabbit_password: {get_param: RabbitPassword}
685 rabbit_cookie: {get_param: RabbitCookie}
686 rabbit_client_use_ssl: {get_param: RabbitClientUseSSL}
687 rabbit_client_port: {get_param: RabbitClientPort}
690 template: '["server"]'
692 server: {get_param: NtpServer}
693 control_virtual_interface: {get_param: ControlVirtualInterface}
694 public_virtual_interface: {get_param: PublicVirtualInterface}
695 swift_hash_suffix: {get_param: SwiftHashSuffix}
696 swift_password: {get_param: SwiftPassword}
697 swift_part_power: {get_param: SwiftPartPower}
698 swift_replicas: {get_param: SwiftReplicas}
699 swift_min_part_hours: {get_param: SwiftMinPartHours}
700 swift_mount_check: {get_param: SwiftMountCheck}
701 enable_package_install: {get_param: EnablePackageInstall}
702 swift_proxy_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, SwiftProxyNetwork]}]}
703 swift_management_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, SwiftMgmtNetwork]}]}
704 cinder_iscsi_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, CinderIscsiNetwork]}]}
705 cinder_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, CinderApiNetwork]}]}
706 glance_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, GlanceApiNetwork]}]}
707 glance_registry_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, GlanceRegistryNetwork]}]}
711 - - {get_param: GlanceProtocol}
713 - {get_param: GlanceApiVirtualIP}
715 - {get_param: GlancePort}
716 heat_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, HeatApiNetwork]}]}
717 keystone_public_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, KeystonePublicApiNetwork]}]}
718 keystone_admin_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, KeystoneAdminApiNetwork]}]}
719 mongo_db_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, MongoDbNetwork]}]}
720 neutron_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, NeutronApiNetwork]}]}
721 neutron_local_ip: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, NeutronLocalIp]}]}
722 ceilometer_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, CeilometerApiNetwork]}]}
723 nova_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, NovaApiNetwork]}]}
724 nova_metadata_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, NovaMetadataNetwork]}]}
725 horizon_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, HorizonNetwork]}]}
726 rabbitmq_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, RabbitMqNetwork]}]}
727 redis_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, RedisNetwork]}]}
728 memcached_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, MemcachedNetwork]}]}
729 mysql_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, MysqlNetwork]}]}
731 # Map heat metadata into hiera datafiles
733 type: OS::Heat::StructuredConfig
735 group: os-apply-config
739 - heat_config_%{::deploy_config_name}
742 - swift_devices_and_proxy # provided by SwiftDevicesAndProxyConfig
743 - ceph_cluster # provided by CephClusterConfig
745 - bootstrap_node # provided by BootstrapNodeConfig
746 - all_nodes # provided by allNodesConfig
747 - vip_data # provided by vip-config
752 raw_data: {get_file: hieradata/common.yaml}
754 raw_data: {get_file: hieradata/ceph.yaml}
756 raw_data: {get_file: hieradata/object.yaml}
758 raw_data: {get_file: hieradata/controller.yaml}
759 mapped_data: # data supplied directly to this deployment configuration, etc
760 bootstack_nodeid: {get_input: bootstack_nodeid}
763 hacluster_pwd: {get_input: pcsd_password}
766 swift::proxy::proxy_local_net_ip: {get_input: swift_proxy_network}
767 swift::proxy::authtoken::auth_uri: {get_input: keystone_auth_uri}
768 swift::proxy::authtoken::identity_uri: {get_input: keystone_identity_uri}
769 swift::storage::all::storage_local_net_ip: {get_input: swift_management_network}
770 swift::swift_hash_suffix: {get_input: swift_hash_suffix}
771 swift::proxy::authtoken::admin_password: {get_input: swift_password}
772 tripleo::ringbuilder::part_power: {get_input: swift_part_power}
773 tripleo::ringbuilder::replicas: {get_input: swift_replicas}
774 tripleo::ringbuilder::min_part_hours: {get_input: swift_min_part_hours}
775 swift_mount_check: {get_input: swift_mount_check}
777 # NOTE(dprince): build_ring support is currently not wired in.
778 # See: https://review.openstack.org/#/c/109225/
779 tripleo::ringbuilder::build_ring: True
782 cinder_enable_rbd_backend: {get_input: cinder_enable_rbd_backend}
783 cinder_lvm_loop_device_size: {get_input: cinder_lvm_loop_device_size}
784 cinder_iscsi_helper: {get_input: cinder_iscsi_helper}
785 cinder_iscsi_ip_address: {get_input: cinder_iscsi_network}
786 cinder::database_connection: {get_input: cinder_dsn}
787 cinder::api::keystone_password: {get_input: cinder_password}
788 cinder::api::auth_uri: {get_input: keystone_auth_uri}
789 cinder::api::identity_uri: {get_input: keystone_identity_uri}
790 cinder::api::bind_host: {get_input: cinder_api_network}
791 cinder::rabbit_userid: {get_input: rabbit_username}
792 cinder::rabbit_password: {get_input: rabbit_password}
793 cinder::rabbit_use_ssl: {get_input: rabbit_client_use_ssl}
794 cinder::rabbit_port: {get_input: rabbit_client_port}
795 cinder::debug: {get_input: debug}
796 cinder_enable_iscsi_backend: {get_input: cinder_enable_iscsi_backend}
799 glance::api::bind_port: {get_input: glance_port}
800 glance::api::bind_host: {get_input: glance_api_network}
801 glance::api::auth_uri: {get_input: keystone_auth_uri}
802 glance::api::identity_uri: {get_input: keystone_identity_uri}
803 glance::api::registry_host: {get_input: glance_registry_network}
804 glance::api::keystone_password: {get_input: glance_password}
805 glance::api::debug: {get_input: debug}
806 glance_notifier_strategy: {get_input: glance_notifier_strategy}
807 glance_log_file: {get_input: glance_log_file}
808 glance_log_file: {get_input: glance_log_file}
809 glance::api::database_connection: {get_input: glance_dsn}
810 glance::registry::keystone_password: {get_input: glance_password}
811 glance::registry::database_connection: {get_input: glance_dsn}
812 glance::registry::bind_host: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, GlanceRegistryNetwork]}]}
813 glance::registry::auth_uri: {get_input: keystone_auth_uri}
814 glance::registry::identity_uri: {get_input: keystone_identity_uri}
815 glance::registry::debug: {get_input: debug}
816 glance::backend::swift::swift_store_auth_address: {get_input: keystone_auth_address}
817 glance::backend::swift::swift_store_user: service:glance
818 glance::backend::swift::swift_store_key: {get_input: glance_password}
819 glance_backend: {get_input: glance_backend}
822 heat_stack_domain_admin_password: {get_input: heat_stack_domain_admin_password}
823 heat::engine::heat_watch_server_url: {get_input: heat.watch_server_url}
824 heat::engine::heat_metadata_server_url: {get_input: heat.metadata_server_url}
825 heat::engine::heat_waitcondition_server_url: {get_input: heat.waitcondition_server_url}
826 heat::engine::auth_encryption_key: {get_input: heat_auth_encryption_key}
827 heat::rabbit_userid: {get_input: rabbit_username}
828 heat::rabbit_password: {get_input: rabbit_password}
829 heat::rabbit_use_ssl: {get_input: rabbit_client_use_ssl}
830 heat::rabbit_port: {get_input: rabbit_client_port}
831 heat::auth_uri: {get_input: keystone_auth_uri}
832 heat::identity_uri: {get_input: keystone_identity_uri}
833 heat::keystone_password: {get_input: heat_password}
834 heat::api::bind_host: {get_input: heat_api_network}
835 heat::api_cloudwatch::bind_host: {get_input: heat_api_network}
836 heat::api_cfn::bind_host: {get_input: heat_api_network}
837 heat::database_connection: {get_input: heat_dsn}
838 heat::instance_user: heat-admin
839 heat::debug: {get_input: debug}
842 keystone::admin_token: {get_input: admin_token}
843 keystone_ca_certificate: {get_input: keystone_ca_certificate}
844 keystone_signing_key: {get_input: keystone_signing_key}
845 keystone_signing_certificate: {get_input: keystone_signing_certificate}
846 keystone_ssl_certificate: {get_input: keystone_ssl_certificate}
847 keystone_ssl_certificate_key: {get_input: keystone_ssl_certificate_key}
848 keystone::database_connection: {get_input: keystone_dsn}
849 keystone::public_bind_host: {get_input: keystone_public_api_network}
850 keystone::admin_bind_host: {get_input: keystone_admin_api_network}
851 keystone::debug: {get_input: debug}
853 mongodb::server::bind_ip: {get_input: mongo_db_network}
855 admin_password: {get_input: admin_password}
856 enable_galera: {get_input: enable_galera}
857 enable_ceph_storage: {get_input: enable_ceph_storage}
858 enable_swift_storage: {get_input: enable_swift_storage}
859 mysql_innodb_buffer_pool_size: {get_input: mysql_innodb_buffer_pool_size}
860 mysql::server::root_password: {get_input: mysql_root_password}
861 mysql_cluster_name: {get_input: mysql_cluster_name}
862 mysql_bind_host: {get_input: mysql_network}
865 neutron::bind_host: {get_input: neutron_api_network}
866 neutron::rabbit_password: {get_input: rabbit_password}
867 neutron::rabbit_user: {get_input: rabbit_user}
868 neutron::rabbit_use_ssl: {get_input: rabbit_client_use_ssl}
869 neutron::rabbit_port: {get_input: rabbit_client_port}
870 neutron::debug: {get_input: debug}
871 neutron::server::auth_uri: {get_input: keystone_auth_uri}
872 neutron::server::identity_uri: {get_input: keystone_identity_uri}
873 neutron::server::database_connection: {get_input: neutron_dsn}
874 neutron::agents::ml2::ovs::enable_tunneling: {get_input: neutron_enable_tunneling}
875 neutron::agents::ml2::ovs::local_ip: {get_input: neutron_local_ip}
876 neutron_flat_networks: {get_input: neutron_flat_networks}
877 neutron::agents::metadata::shared_secret: {get_input: neutron_metadata_proxy_shared_secret}
878 neutron::agents::metadata::metadata_ip: {get_input: neutron_api_network}
879 neutron_agent_mode: {get_input: neutron_agent_mode}
880 neutron_router_distributed: {get_input: neutron_router_distributed}
881 neutron_mechanism_drivers: {get_input: neutron_mechanism_drivers}
882 neutron::server::allow_automatic_l3agent_failover: {get_input: neutron_allow_l3agent_failover}
883 neutron::server::l3_ha: {get_input: neutron_l3_ha}
884 neutron::plugins::ml2::network_vlan_ranges: {get_input: neutron_network_vlan_ranges}
885 neutron_bridge_mappings: {get_input: neutron_bridge_mappings}
886 neutron_public_interface: {get_input: neutron_public_interface}
887 neutron_public_interface_raw_device: {get_input: neutron_public_interface_raw_device}
888 neutron_public_interface_default_route: {get_input: neutron_public_interface_default_route}
889 neutron_public_interface_tag: {get_input: neutron_public_interface_tag}
890 neutron_tenant_network_type: {get_input: neutron_tenant_network_type}
891 neutron_tunnel_types: {get_input: neutron_tunnel_types}
892 neutron::server::auth_password: {get_input: neutron_password}
893 neutron::agents::metadata::auth_password: {get_input: neutron_password}
894 neutron_dnsmasq_options: {get_input: neutron_dnsmasq_options}
895 neutron_dsn: {get_input: neutron_dsn}
896 neutron::agents::metadata::auth_url: {get_input: keystone_identity_uri}
899 ceilometer_backend: {get_input: ceilometer_backend}
900 ceilometer_mysql_conn_string: {get_input: ceilometer_dsn}
901 ceilometer::metering_secret: {get_input: ceilometer_metering_secret}
902 ceilometer::rabbit_userid: {get_input: rabbit_username}
903 ceilometer::rabbit_password: {get_input: rabbit_password}
904 ceilometer::rabbit_use_ssl: {get_input: rabbit_client_use_ssl}
905 ceilometer::rabbit_port: {get_input: rabbit_client_port}
906 ceilometer::debug: {get_input: debug}
907 ceilometer::api::host: {get_input: ceilometer_api_network}
908 ceilometer::api::keystone_password: {get_input: ceilometer_password}
909 ceilometer::api::keystone_auth_uri: {get_input: keystone_auth_uri}
910 ceilometer::api::keystone_identity_uri: {get_input: keystone_identity_uri}
911 ceilometer::agent::auth::auth_password: {get_input: ceilometer_password}
912 ceilometer::agent::auth::auth_url: {get_input: keystone_auth_address}
913 snmpd_readonly_user_name: {get_input: snmpd_readonly_user_name}
914 snmpd_readonly_user_password: {get_input: snmpd_readonly_user_password}
917 nova::rabbit_userid: {get_input: rabbit_username}
918 nova::rabbit_password: {get_input: rabbit_password}
919 nova::rabbit_use_ssl: {get_input: rabbit_client_use_ssl}
920 nova::rabbit_port: {get_input: rabbit_client_port}
921 nova::debug: {get_input: debug}
922 nova::api::auth_uri: {get_input: keystone_auth_uri}
923 nova::api::identity_uri: {get_input: keystone_identity_uri}
924 nova::api::api_bind_address: {get_input: nova_api_network}
925 nova::api::metadata_listen: {get_input: nova_metadata_network}
926 nova::api::admin_password: {get_input: nova_password}
927 nova::database_connection: {get_input: nova_dsn}
928 nova::glance_api_servers: {get_input: glance_api_servers}
929 nova::api::neutron_metadata_proxy_shared_secret: {get_input: neutron_metadata_proxy_shared_secret}
930 nova::network::neutron::neutron_admin_password: {get_input: neutron_password}
931 nova::network::neutron::neutron_url: {get_input: neutron_url}
932 nova::network::neutron::neutron_admin_auth_url: {get_input: neutron_admin_auth_url}
935 horizon::django_debug: {get_input: debug}
936 horizon::secret_key: {get_input: horizon_secret}
937 horizon::bind_address: {get_input: horizon_network}
938 horizon::keystone_url: {get_input: keystone_auth_uri}
941 rabbitmq::node_ip_address: {get_input: rabbitmq_network}
942 rabbitmq::erlang_cookie: {get_input: rabbit_cookie}
944 redis::bind: {get_input: redis_network}
946 memcached::listen_ip: {get_input: memcached_network}
947 neutron_public_interface_ip: {get_input: neutron_public_interface_ip}
948 ntp::servers: {get_input: ntp_servers}
949 control_virtual_interface: {get_input: control_virtual_interface}
950 public_virtual_interface: {get_input: public_virtual_interface}
951 tripleo::loadbalancer::control_virtual_interface: {get_input: control_virtual_interface}
952 tripleo::loadbalancer::public_virtual_interface: {get_input: public_virtual_interface}
953 enable_package_install: {get_input: enable_package_install}
957 description: IP address of the server in the ctlplane network
958 value: {get_attr: [Controller, networks, ctlplane, 0]}
960 description: IP address of the server in the external network
961 value: {get_attr: [ExternalPort, ip_address]}
962 internal_api_ip_address:
963 description: IP address of the server in the internal_api network
964 value: {get_attr: [InternalApiPort, ip_address]}
966 description: IP address of the server in the storage network
967 value: {get_attr: [StoragePort, ip_address]}
968 storage_mgmt_ip_address:
969 description: IP address of the server in the storage_mgmt network
970 value: {get_attr: [StorageMgmtPort, ip_address]}
972 description: IP address of the server in the tenant network
973 value: {get_attr: [TenantPort, ip_address]}
975 description: Hostname of the server
976 value: {get_attr: [Controller, name]}
979 Node object in the format {ip: ..., name: ...} format that the corosync
982 ip: {get_attr: [Controller, networks, ctlplane, 0]}
983 name: {get_attr: [Controller, name]}
986 Server's IP address and hostname in the /etc/hosts format
989 template: IP HOST CLOUDNAME
991 IP: {get_attr: [Controller, networks, ctlplane, 0]}
992 HOST: {get_attr: [Controller, name]}
993 CLOUDNAME: {get_param: CloudName}
994 nova_server_resource:
995 description: Heat resource handle for the Nova compute server
997 {get_resource: Controller}
999 description: Swift device formatted for swift-ring-builder
1002 template: 'r1z1-IP:%PORT%/d1'
1004 IP: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, SwiftMgmtNetwork]}]}
1005 swift_proxy_memcache:
1006 description: Swift proxy-memcache value
1009 template: "IP:11211"
1011 IP: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, MemcachedNetwork]}]}