1 heat_template_version: 2015-04-30
4 OpenStack controller node configured by Puppet.
8 default: 'admin@example.com'
9 description: The email for the keystone admin account.
14 description: The password for the keystone admin account, used for monitoring, querying neutron etc.
19 description: The keystone auth secret and db password.
22 CeilometerApiVirtualIP:
27 description: The ceilometer backend type.
29 CeilometerMeteringSecret:
31 description: Secret shared by the ceilometer services.
36 description: The password for the ceilometer service and db account.
42 CinderEnableNfsBackend:
44 description: Whether to enable or not the NFS backend for Cinder
46 CinderEnableIscsiBackend:
48 description: Whether to enable or not the Iscsi backend for Cinder
50 CinderEnableRbdBackend:
52 description: Whether to enable or not the Rbd backend for Cinder
56 description: The iSCSI helper to use with cinder.
58 CinderLVMLoopDeviceSize:
60 description: The size of the loopback file used by the cinder LVM driver.
62 CinderNfsMountOptions:
65 Mount options for NFS mounts used by Cinder NFS backend. Effective
66 when CinderEnableNfsBackend is true.
71 NFS servers used by Cinder NFS backend. Effective when
72 CinderEnableNfsBackend is true.
73 type: comma_delimited_list
76 description: The password for the cinder service and db account, used by cinder-api.
81 description: Contains parameters to configure Cinder backends. Typically
82 set via parameter_defaults in the resource registry.
86 description: The DNS name of this cloud. E.g. ci-overcloud.tripleo.org
88 ControllerExtraConfig:
91 Controller specific hiera configuration data to inject into the cluster.
93 ControlVirtualInterface:
95 description: Interface where virtual ip will be assigned.
99 description: Set to True to enable debugging on all services.
103 description: Whether to enable fencing in Pacemaker or not.
107 description: Whether to use Galera instead of regular MariaDB.
111 description: Whether to deploy Ceph Storage (OSD) on the Controller
115 description: Whether to enable Swift Storage on the Controller
120 Additional hieradata to inject into the cluster, note that
121 ControllerExtraConfig takes precedence over ExtraConfig.
126 Pacemaker fencing configuration. The JSON should have
127 the following structure:
131 "agent": "AGENT_NAME",
132 "host_mac": "HOST_MAC_ADDRESS",
133 "params": {"PARAM_NAME": "PARAM_VALUE"}
141 "agent": "fence_xvm",
142 "host_mac": "52:54:00:aa:bb:cc",
144 "multicast_address": "225.0.0.12",
145 "port": "baremetal_0",
147 "manage_key_file": true,
148 "key_file": "/etc/fence_xvm.key",
149 "key_file_password": "abcdef"
156 description: Flavor for control nodes to request when deploying.
159 - custom_constraint: nova.flavor
160 GlanceNotifierStrategy:
161 description: Strategy to use for Glance notification queue
165 description: The filepath of the file to use for logging messages from Glance.
170 description: The password for the glance service and db account, used by the glance services.
175 description: The short name of the Glance backend to use. Should be one
176 of swift, rbd, or file
179 - allowed_values: ['swift', 'file', 'rbd']
180 GlanceFilePcmkDevice:
183 An exported storage device that should be mounted by Pacemaker
184 as Glance storage. Effective when GlanceFilePcmkManage is true.
186 GlanceFilePcmkFstype:
189 Filesystem type for Pacemaker mount used as Glance storage.
190 Effective when GlanceFilePcmkManage is true.
192 GlanceFilePcmkManage:
195 Whether to make Glance file backend a mount managed by Pacemaker.
196 Effective when GlanceBackend is 'file'.
198 GlanceFilePcmkOptions:
201 Mount options for Pacemaker mount used as Glance storage.
202 Effective when GlanceFilePcmkManage is true.
204 HAProxySyslogAddress:
206 description: Syslog address where HAproxy will send its log
210 description: The password for the Heat service and db account, used by the Heat services.
213 HeatStackDomainAdminPassword:
214 description: Password for heat_domain_admin user.
218 HeatAuthEncryptionKey:
219 description: Auth encryption key for heat-engine
224 description: A list of IP/Hostname allowed to connect to horizon
225 type: comma_delimited_list
227 description: Secret key for Django
232 default: overcloud-control
234 - custom_constraint: glance.image
236 default: 'REBUILD_PRESERVE_EPHEMERAL'
237 description: What policy to use when reconstructing instances. REBUILD for rebuilds, REBUILD_PRESERVE_EPHEMERAL to preserve /mnt.
241 description: Name of an existing EC2 KeyPair to enable SSH access to the instances
244 - custom_constraint: nova.keypair
245 KeystoneCACertificate:
247 description: Keystone self-signed certificate authority certificate.
249 KeystoneSigningCertificate:
251 description: Keystone certificate for verifying token validity.
255 description: Keystone key for signing tokens.
258 KeystoneSSLCertificate:
260 description: Keystone certificate for verifying token validity.
262 KeystoneSSLCertificateKey:
264 description: Keystone key for signing tokens.
267 KeystoneNotificationDriver:
268 description: Comma-separated list of Oslo notification drivers used by Keystone
269 default: ['messaging']
270 type: comma_delimited_list
271 KeystoneNotificationFormat:
272 description: The Keystone notification format
276 - allowed_values: [ 'basic', 'cadf' ]
280 description: Keystone region for endpoint
283 description: Whether to manage IPtables rules.
287 description: Whether IPtables rules should be purged before setting up the new ones.
289 MysqlClusterUniquePart:
290 description: A unique identifier of the MySQL cluster the controller is in.
292 default: 'unset' # Has to be here because of the ignored empty value bug
293 # Drop the validation: https://bugs.launchpad.net/tripleo/+bug/1405446
295 # - length: {min: 4, max: 10}
296 MysqlInnodbBufferPoolSize:
298 Specifies the size of the buffer pool in megabytes. Setting to
299 zero should be interpreted as "no value" and will defer to the
304 description: Configures MySQL max_connections config setting
310 default: '' # Has to be here because of the ignored empty value bug
311 NeutronExternalNetworkBridge:
312 description: Name of bridge used for external network traffic.
315 NeutronBridgeMappings:
317 The OVS logical->physical bridge mappings to use. See the Neutron
318 documentation for details. Defaults to mapping br-ex - the external
319 bridge on hosts - to a physical name 'datacentre' which can be used
320 to create provider networks (and we use this for the default floating
321 network) - if changing this either use different post-install network
322 scripts or be sure to keep 'datacentre' as a mapping network name.
324 default: "datacentre:br-ex"
325 NeutronDnsmasqOptions:
326 default: 'dhcp-option-force=26,1400'
327 description: Dnsmasq options for neutron-dhcp-agent. The default value here forces MTU to be set to 1400 to account for the gre tunnel overhead.
331 description: Agent mode for the neutron-l3-agent on the controller hosts
335 description: Whether to enable l3-agent HA
337 NeutronDhcpAgentsPerNetwork:
340 description: The number of neutron dhcp agents to schedule per network
343 description: Whether to configure Neutron Distributed Virtual Routers
345 NeutronMetadataProxySharedSecret:
347 description: Shared secret to prevent spoofing
353 The core plugin for Neutron. The value should be the entrypoint to be loaded
354 from neutron.core_plugins namespace.
356 NeutronServicePlugins:
359 Comma-separated list of service plugin entrypoints to be loaded from the
360 neutron.service_plugins namespace.
361 type: comma_delimited_list
363 default: "vxlan,vlan,flat,gre"
365 Comma-separated list of network type driver entrypoints to be loaded.
366 type: comma_delimited_list
367 NeutronMechanismDrivers:
368 default: 'openvswitch'
370 The mechanism drivers for the Neutron tenant network. To specify multiple
371 values, use a comma separated string, like so: 'openvswitch,l2_population'
373 NeutronAllowL3AgentFailover:
375 description: Allow automatic l3-agent failover
377 NeutronEnableIsolatedMetadata:
379 description: If True, DHCP provide metadata route to VM.
381 NeutronEnableTunnelling:
387 Enable/disable the L2 population feature in the Neutron agents.
391 default: 'datacentre'
392 description: If set, flat networks to configure in neutron plugins.
395 description: Whether to enable l3-agent HA
399 description: The tenant network type for Neutron, either gre or vxlan.
401 NeutronNetworkVLANRanges:
402 default: 'datacentre'
404 The Neutron ML2 and OpenVSwitch vlan mapping range to support. See the
405 Neutron documentation for permitted values. Defaults to permitting any
406 VLAN on the 'datacentre' physical network (See NeutronBridgeMappings).
407 type: comma_delimited_list
410 description: The password for the neutron service and db account, used by neutron agents.
413 NeutronPublicInterface:
415 description: What interface to bridge onto br-ex for network nodes.
417 NeutronPublicInterfaceTag:
420 VLAN tag for creating a public VLAN. The tag will be used to
421 create an access port on the exterior bridge for each control plane node,
422 and that port will be given the IP address returned by neutron from the
423 public network. Set CONTROLEXTRA=overcloud-vlan-port.yaml when compiling
424 overcloud.yaml to include the deployment of VLAN ports to the control
427 NeutronPublicInterfaceDefaultRoute:
429 description: A custom default route for the NeutronPublicInterface.
431 NeutronPublicInterfaceIP:
433 description: A custom IP address to put onto the NeutronPublicInterface.
435 NeutronPublicInterfaceRawDevice:
437 description: If set, the public interface is a vlan with this device as the raw device.
442 The tunnel types for the Neutron tenant network. To specify multiple
443 values, use a comma separated string, like so: 'gre,vxlan'
445 NeutronTunnelIdRanges:
447 Comma-separated list of <tun_min>:<tun_max> tuples enumerating ranges
448 of GRE tunnel IDs that are available for tenant network allocation
449 default: ["1:1000", ]
450 type: comma_delimited_list
453 Comma-separated list of <vni_min>:<vni_max> tuples enumerating ranges
454 of VXLAN VNI IDs that are available for tenant network allocation
455 default: ["1:1000", ]
456 type: comma_delimited_list
462 description: The password for the nova service and db account, used by nova-api.
467 description: Should MongoDb journaling be disabled
471 description: Comma-separated list of ntp servers
472 type: comma_delimited_list
475 description: The password for the 'pcsd' user.
477 PublicVirtualInterface:
480 Specifies the interface where the public-facing virtual ip will be assigned.
481 This should be int_public when a VLAN is being used.
485 default: '' # Has to be here because of the ignored empty value bug
488 default: '' # Has to be here because of the ignored empty value bug
492 description: The password for RabbitMQ
497 description: The username for RabbitMQ
502 Rabbit client subscriber parameter to specify
503 an SSL connection to the RabbitMQ host.
507 description: Set rabbit subscriber port, change this if using SSL
511 description: Configures RabbitMQ FD limit
515 default: '' # Has to be here because of the ignored empty value bug
516 SnmpdReadonlyUserName:
517 default: ro_snmp_user
518 description: The user name for SNMPd with readonly rights running on all Overcloud nodes
520 SnmpdReadonlyUserPassword:
522 description: The user password for SNMPd with readonly rights running on all Overcloud nodes
527 description: A random string to be used as a salt when hashing to determine mappings
533 description: Value of mount_check in Swift account/container/object -server.conf
538 description: The minimum time (in hours) before a partition in a ring can be moved following a rebalance.
541 description: Partition Power to use when building Swift rings
545 description: The password for the swift service account, used by the swift proxy
555 description: How many replicas to use in the swift rings.
556 VirtualIP: # DEPRECATED: use per service settings instead
558 default: '' # Has to be here because of the ignored empty value bug
565 GlanceRegistryVirtualIP:
571 KeystoneAdminApiVirtualIP:
574 KeystonePublicApiVirtualIP:
580 EnablePackageInstall:
582 description: Set to true to enable package installation via Puppet
586 description: Mapping of service_name -> network name. Typically set
587 via parameter_defaults in the resource registry.
591 description: Mapping of service endpoint -> protocol. Typically set
592 via parameter_defaults in the resource registry.
598 Setting to a previously unused value during stack-update will trigger
599 package update on all nodes
602 default: '' # Defaults to Heat created hostname
603 NetworkDeploymentActions:
604 type: comma_delimited_list
606 Heat action when to apply network configuration changes
615 type: OS::Nova::Server
617 image: {get_param: Image}
618 image_update_policy: {get_param: ImageUpdatePolicy}
619 flavor: {get_param: Flavor}
620 key_name: {get_param: KeyName}
623 user_data_format: SOFTWARE_CONFIG
624 user_data: {get_resource: UserData}
625 name: {get_param: Hostname}
627 # Combine the NodeAdminUserData and NodeUserData mime archives
629 type: OS::Heat::MultipartMime
632 - config: {get_resource: NodeAdminUserData}
634 - config: {get_resource: NodeUserData}
637 # Creates the "heat-admin" user if configured via the environment
638 # Should return a OS::Heat::MultipartMime reference via OS::stack_id
640 type: OS::TripleO::NodeAdminUserData
642 # For optional operator additional userdata
643 # Should return a OS::Heat::MultipartMime reference via OS::stack_id
645 type: OS::TripleO::NodeUserData
648 type: OS::TripleO::Controller::Ports::ExternalPort
650 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
653 type: OS::TripleO::Controller::Ports::InternalApiPort
655 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
658 type: OS::TripleO::Controller::Ports::StoragePort
660 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
663 type: OS::TripleO::Controller::Ports::StorageMgmtPort
665 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
668 type: OS::TripleO::Controller::Ports::TenantPort
670 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
673 type: OS::TripleO::Network::Ports::NetIpMap
675 ControlPlaneIp: {get_attr: [Controller, networks, ctlplane, 0]}
676 ExternalIp: {get_attr: [ExternalPort, ip_address]}
677 InternalApiIp: {get_attr: [InternalApiPort, ip_address]}
678 StorageIp: {get_attr: [StoragePort, ip_address]}
679 StorageMgmtIp: {get_attr: [StorageMgmtPort, ip_address]}
680 TenantIp: {get_attr: [TenantPort, ip_address]}
683 type: OS::TripleO::Network::Ports::NetIpSubnetMap
685 ControlPlaneIp: {get_attr: [Controller, networks, ctlplane, 0]}
686 ExternalIpSubnet: {get_attr: [ExternalPort, ip_subnet]}
687 InternalApiIpSubnet: {get_attr: [InternalApiPort, ip_subnet]}
688 StorageIpSubnet: {get_attr: [StoragePort, ip_subnet]}
689 StorageMgmtIpSubnet: {get_attr: [StorageMgmtPort, ip_subnet]}
690 TenantIpSubnet: {get_attr: [TenantPort, ip_subnet]}
693 type: OS::TripleO::Controller::Net::SoftwareConfig
695 ControlPlaneIp: {get_attr: [Controller, networks, ctlplane, 0]}
696 ExternalIpSubnet: {get_attr: [ExternalPort, ip_subnet]}
697 InternalApiIpSubnet: {get_attr: [InternalApiPort, ip_subnet]}
698 StorageIpSubnet: {get_attr: [StoragePort, ip_subnet]}
699 StorageMgmtIpSubnet: {get_attr: [StorageMgmtPort, ip_subnet]}
700 TenantIpSubnet: {get_attr: [TenantPort, ip_subnet]}
703 type: OS::TripleO::SoftwareDeployment
705 config: {get_resource: NetworkConfig}
706 server: {get_resource: Controller}
707 actions: {get_param: NetworkDeploymentActions}
710 interface_name: {get_param: NeutronPublicInterface}
712 # Resource for site-specific injection of root certificate
714 depends_on: NetworkDeployment
715 type: OS::TripleO::NodeTLSCAData
717 server: {get_resource: Controller}
719 # Hook for site-specific passing of private keys/certificates
721 depends_on: NodeTLSCAData
722 type: OS::TripleO::NodeTLSData
724 server: {get_resource: Controller}
725 NodeIndex: {get_param: NodeIndex}
727 ControllerDeployment:
728 type: OS::TripleO::SoftwareDeployment
729 depends_on: NetworkDeployment
731 config: {get_resource: ControllerConfig}
732 server: {get_resource: Controller}
734 bootstack_nodeid: {get_attr: [Controller, name]}
735 neutron_enable_tunneling: {get_param: NeutronEnableTunnelling}
736 neutron_enable_l2pop: {get_param: NeutronEnableL2Pop}
737 neutron_enable_isolated_metadata: {get_param: NeutronEnableIsolatedMetadata}
738 haproxy_log_address: {get_param: HAProxySyslogAddress}
739 heat.watch_server_url:
743 - {get_param: HeatApiVirtualIP}
745 heat.metadata_server_url:
749 - {get_param: HeatApiVirtualIP}
751 heat.waitcondition_server_url:
755 - {get_param: HeatApiVirtualIP}
756 - ':8000/v1/waitcondition'
757 heat_auth_encryption_key: {get_param: HeatAuthEncryptionKey}
758 horizon_allowed_hosts: {get_param: HorizonAllowedHosts}
759 horizon_secret: {get_param: HorizonSecret}
760 admin_email: {get_param: AdminEmail}
761 admin_password: {get_param: AdminPassword}
762 admin_token: {get_param: AdminToken}
763 neutron_public_interface_ip: {get_param: NeutronPublicInterfaceIP}
764 debug: {get_param: Debug}
765 cinder_enable_nfs_backend: {get_param: CinderEnableNfsBackend}
766 cinder_enable_rbd_backend: {get_param: CinderEnableRbdBackend}
767 cinder_nfs_mount_options: {get_param: CinderNfsMountOptions}
770 template: "['SERVERS']"
775 - {get_param: CinderNfsServers}
776 cinder_lvm_loop_device_size: {get_param: CinderLVMLoopDeviceSize}
777 cinder_password: {get_param: CinderPassword}
778 cinder_enable_iscsi_backend: {get_param: CinderEnableIscsiBackend}
779 cinder_iscsi_helper: {get_param: CinderISCSIHelper}
780 cinder_backend_config: {get_param: CinderBackendConfig}
784 - - 'mysql://cinder:'
785 - {get_param: CinderPassword}
787 - {get_param: MysqlVirtualIP}
789 glance_port: {get_param: [EndpointMap, GlanceInternal, port]}
790 glance_password: {get_param: GlancePassword}
791 glance_backend: {get_param: GlanceBackend}
792 glance_file_pcmk_device: {get_param: GlanceFilePcmkDevice}
793 glance_file_pcmk_fstype: {get_param: GlanceFilePcmkFstype}
794 glance_file_pcmk_manage: {get_param: GlanceFilePcmkManage}
795 glance_file_pcmk_options: {get_param: GlanceFilePcmkOptions}
796 glance_notifier_strategy: {get_param: GlanceNotifierStrategy}
797 glance_log_file: {get_param: GlanceLogFile}
801 - - 'mysql://glance:'
802 - {get_param: GlancePassword}
804 - {get_param: MysqlVirtualIP}
806 heat_password: {get_param: HeatPassword}
807 heat_stack_domain_admin_password: {get_param: HeatStackDomainAdminPassword}
812 - {get_param: HeatPassword}
814 - {get_param: MysqlVirtualIP}
816 keystone_ca_certificate: {get_param: KeystoneCACertificate}
817 keystone_signing_key: {get_param: KeystoneSigningKey}
818 keystone_signing_certificate: {get_param: KeystoneSigningCertificate}
819 keystone_ssl_certificate: {get_param: KeystoneSSLCertificate}
820 keystone_ssl_certificate_key: {get_param: KeystoneSSLCertificateKey}
821 keystone_notification_driver: {get_param: KeystoneNotificationDriver}
822 keystone_notification_format: {get_param: KeystoneNotificationFormat}
826 - - 'mysql://keystone:'
827 - {get_param: AdminToken}
829 - {get_param: MysqlVirtualIP}
831 keystone_identity_uri: { get_param: [EndpointMap, KeystoneAdmin, uri_no_suffix] }
832 keystone_auth_uri: {get_param: [EndpointMap, KeystoneInternal, uri] }
833 keystone_public_url: { get_param: [EndpointMap, KeystonePublic, uri_no_suffix] }
834 keystone_internal_url: { get_param: [EndpointMap, KeystoneInternal, uri_no_suffix] }
835 keystone_ec2_uri: { get_param: [EndpointMap, KeystoneEC2, uri] }
836 enable_fencing: {get_param: EnableFencing}
837 enable_galera: {get_param: EnableGalera}
838 enable_ceph_storage: {get_param: EnableCephStorage}
839 enable_swift_storage: {get_param: EnableSwiftStorage}
840 manage_firewall: {get_param: ManageFirewall}
841 purge_firewall_rules: {get_param: PurgeFirewallRules}
842 mysql_innodb_buffer_pool_size: {get_param: MysqlInnodbBufferPoolSize}
843 mysql_max_connections: {get_param: MysqlMaxConnections}
844 mysql_root_password: {get_param: MysqlRootPassword}
847 template: tripleo-CLUSTER
849 CLUSTER: {get_param: MysqlClusterUniquePart}
850 neutron_flat_networks: {get_param: NeutronFlatNetworks}
851 neutron_metadata_proxy_shared_secret: {get_param: NeutronMetadataProxySharedSecret}
852 neutron_agent_mode: {get_param: NeutronAgentMode}
853 neutron_router_distributed: {get_param: NeutronDVR}
854 neutron_core_plugin: {get_param: NeutronCorePlugin}
855 neutron_service_plugins:
857 template: "['PLUGINS']"
862 - {get_param: NeutronServicePlugins}
863 neutron_type_drivers:
865 template: "['DRIVERS']"
870 - {get_param: NeutronTypeDrivers}
871 neutron_mechanism_drivers: {get_param: NeutronMechanismDrivers}
872 neutron_allow_l3agent_failover: {get_param: NeutronAllowL3AgentFailover}
873 neutron_l3_ha: {get_param: NeutronL3HA}
874 neutron_dhcp_agents_per_network: {get_param: NeutronDhcpAgentsPerNetwork}
875 neutron_network_vlan_ranges:
877 template: "['RANGES']"
882 - {get_param: NeutronNetworkVLANRanges}
883 neutron_bridge_mappings: {get_param: NeutronBridgeMappings}
884 neutron_external_network_bridge: {get_param: NeutronExternalNetworkBridge}
885 neutron_public_interface: {get_param: NeutronPublicInterface}
886 neutron_public_interface_raw_device: {get_param: NeutronPublicInterfaceRawDevice}
887 neutron_public_interface_default_route: {get_param: NeutronPublicInterfaceDefaultRoute}
888 neutron_public_interface_tag: {get_param: NeutronPublicInterfaceTag}
889 neutron_tenant_network_type: {get_param: NeutronNetworkType}
890 neutron_tunnel_types: {get_param: NeutronTunnelTypes}
891 neutron_tunnel_id_ranges:
893 template: "['RANGES']"
898 - {get_param: NeutronTunnelIdRanges}
901 template: "['RANGES']"
906 - {get_param: NeutronVniRanges}
907 neutron_password: {get_param: NeutronPassword}
908 neutron_dnsmasq_options: {get_param: NeutronDnsmasqOptions}
912 - - 'mysql://neutron:'
913 - {get_param: NeutronPassword}
915 - {get_param: MysqlVirtualIP}
916 - '/ovs_neutron?charset=utf8'
917 neutron_internal_url: { get_param: [ EndpointMap, NeutronInternal, uri ] }
918 neutron_public_url: { get_param: [ EndpointMap, NeutronPublic, uri ] }
919 neutron_admin_url: { get_param: [ EndpointMap, NeutronAdmin, uri ] }
920 neutron_admin_auth_url: { get_param: [ EndpointMap, KeystoneAdmin, uri ] }
921 nova_internal_url: { get_param: [ EndpointMap, NovaInternal, uri ] }
922 ceilometer_backend: {get_param: CeilometerBackend}
923 ceilometer_metering_secret: {get_param: CeilometerMeteringSecret}
924 ceilometer_password: {get_param: CeilometerPassword}
925 ceilometer_coordination_url:
929 - {get_param: RedisVirtualIP}
934 - - 'mysql://ceilometer:'
935 - {get_param: CeilometerPassword}
937 - {get_param: MysqlVirtualIP}
939 snmpd_readonly_user_name: {get_param: SnmpdReadonlyUserName}
940 snmpd_readonly_user_password: {get_param: SnmpdReadonlyUserPassword}
941 nova_password: {get_param: NovaPassword}
946 - {get_param: NovaPassword}
948 - {get_param: MysqlVirtualIP}
950 fencing_config: {get_param: FencingConfig}
951 pcsd_password: {get_param: PcsdPassword}
952 rabbit_username: {get_param: RabbitUserName}
953 rabbit_password: {get_param: RabbitPassword}
954 rabbit_cookie: {get_param: RabbitCookie}
955 rabbit_client_use_ssl: {get_param: RabbitClientUseSSL}
956 rabbit_client_port: {get_param: RabbitClientPort}
957 mongodb_no_journal: {get_param: MongoDbNoJournal}
958 # We need to force this into quotes or hiera will return integer causing
959 # the puppet module validation regexp to fail.
960 # Remove when: https://github.com/puppetlabs/puppetlabs-rabbitmq/pull/401
965 LIMIT: {get_param: RabbitFDLimit}
966 ntp_servers: {get_param: NtpServer}
967 control_virtual_interface: {get_param: ControlVirtualInterface}
968 public_virtual_interface: {get_param: PublicVirtualInterface}
969 swift_hash_suffix: {get_param: SwiftHashSuffix}
970 swift_password: {get_param: SwiftPassword}
971 swift_part_power: {get_param: SwiftPartPower}
972 swift_replicas: {get_param: SwiftReplicas}
973 swift_min_part_hours: {get_param: SwiftMinPartHours}
974 swift_mount_check: {get_param: SwiftMountCheck}
975 enable_package_install: {get_param: EnablePackageInstall}
976 enable_package_upgrade: {get_attr: [UpdateDeployment, update_managed_packages]}
977 swift_proxy_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, SwiftProxyNetwork]}]}
978 swift_management_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, SwiftMgmtNetwork]}]}
979 cinder_iscsi_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, CinderIscsiNetwork]}]}
980 cinder_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, CinderApiNetwork]}]}
981 glance_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, GlanceApiNetwork]}]}
982 glance_registry_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, GlanceRegistryNetwork]}]}
983 glance_api_servers: { get_param: [EndpointMap, GlanceInternal, uri]}
984 glance_registry_host: {get_param: GlanceRegistryVirtualIP}
985 heat_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, HeatApiNetwork]}]}
986 keystone_public_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, KeystonePublicApiNetwork]}]}
987 keystone_admin_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, KeystoneAdminApiNetwork]}]}
988 keystone_region: {get_param: KeystoneRegion}
989 mongo_db_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, MongoDbNetwork]}]}
990 neutron_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, NeutronApiNetwork]}]}
991 neutron_local_ip: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, NeutronTenantNetwork]}]}
992 ceilometer_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, CeilometerApiNetwork]}]}
993 nova_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, NovaApiNetwork]}]}
994 nova_metadata_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, NovaMetadataNetwork]}]}
995 horizon_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, HorizonNetwork]}]}
996 rabbitmq_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, RabbitMqNetwork]}]}
997 redis_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, RedisNetwork]}]}
998 redis_vip: {get_param: RedisVirtualIP}
999 memcached_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, MemcachedNetwork]}]}
1000 mysql_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, MysqlNetwork]}]}
1001 mysql_virtual_ip: {get_param: MysqlVirtualIP}
1002 ceph_cluster_network: {get_attr: [NetIpSubnetMap, net_ip_subnet_map, {get_param: [ServiceNetMap, CephClusterNetwork]}]}
1003 ceph_public_network: {get_attr: [NetIpSubnetMap, net_ip_subnet_map, {get_param: [ServiceNetMap, CephPublicNetwork]}]}
1004 ceph_public_ip: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, CephPublicNetwork]}]}
1006 # Map heat metadata into hiera datafiles
1008 type: OS::Heat::StructuredConfig
1010 group: os-apply-config
1015 - heat_config_%{::deploy_config_name}
1016 - controller_extraconfig
1021 - swift_devices_and_proxy # provided by SwiftDevicesAndProxyConfig
1022 - ceph_cluster # provided by CephClusterConfig
1024 - bootstrap_node # provided by BootstrapNodeConfig
1025 - all_nodes # provided by allNodesConfig
1026 - vip_data # provided by vip-config
1029 - cinder_netapp_data # Optionally provided by ControllerExtraConfigPre
1030 - neutron_bigswitch_data # Optionally provided by ControllerExtraConfigPre
1031 - neutron_cisco_data # Optionally provided by ControllerExtraConfigPre
1032 - cisco_n1kv_data # Optionally provided by ControllerExtraConfigPre
1034 controller_extraconfig:
1035 mapped_data: {get_param: ControllerExtraConfig}
1037 mapped_data: {get_param: ExtraConfig}
1039 raw_data: {get_file: hieradata/common.yaml}
1041 raw_data: {get_file: hieradata/ceph.yaml}
1043 ceph::profile::params::cluster_network: {get_input: ceph_cluster_network}
1044 ceph::profile::params::public_network: {get_input: ceph_public_network}
1045 ceph::mon::public_addr: {get_input: ceph_public_ip}
1047 raw_data: {get_file: hieradata/database.yaml}
1049 raw_data: {get_file: hieradata/object.yaml}
1051 raw_data: {get_file: hieradata/controller.yaml}
1052 mapped_data: # data supplied directly to this deployment configuration, etc
1053 bootstack_nodeid: {get_input: bootstack_nodeid}
1056 enable_fencing: {get_input: enable_fencing}
1057 hacluster_pwd: {get_input: pcsd_password}
1058 tripleo::fencing::config: {get_input: fencing_config}
1061 swift::proxy::proxy_local_net_ip: {get_input: swift_proxy_network}
1062 swift::proxy::authtoken::auth_uri: {get_input: keystone_auth_uri}
1063 swift::proxy::authtoken::identity_uri: {get_input: keystone_identity_uri}
1064 swift::storage::all::storage_local_net_ip: {get_input: swift_management_network}
1065 swift::swift_hash_suffix: {get_input: swift_hash_suffix}
1066 swift::proxy::authtoken::admin_password: {get_input: swift_password}
1067 tripleo::ringbuilder::part_power: {get_input: swift_part_power}
1068 tripleo::ringbuilder::replicas: {get_input: swift_replicas}
1069 tripleo::ringbuilder::min_part_hours: {get_input: swift_min_part_hours}
1070 swift_mount_check: {get_input: swift_mount_check}
1072 # NOTE(dprince): build_ring support is currently not wired in.
1073 # See: https://review.openstack.org/#/c/109225/
1074 tripleo::ringbuilder::build_ring: True
1077 cinder_enable_nfs_backend: {get_input: cinder_enable_nfs_backend}
1078 cinder_enable_rbd_backend: {get_input: cinder_enable_rbd_backend}
1079 cinder_nfs_mount_options: {get_input: cinder_nfs_mount_options}
1080 cinder_nfs_servers: {get_input: cinder_nfs_servers}
1081 cinder_lvm_loop_device_size: {get_input: cinder_lvm_loop_device_size}
1082 cinder_iscsi_helper: {get_input: cinder_iscsi_helper}
1083 cinder_iscsi_ip_address: {get_input: cinder_iscsi_network}
1084 cinder::database_connection: {get_input: cinder_dsn}
1085 cinder::api::keystone_password: {get_input: cinder_password}
1086 cinder::api::auth_uri: {get_input: keystone_auth_uri}
1087 cinder::api::identity_uri: {get_input: keystone_identity_uri}
1088 cinder::api::bind_host: {get_input: cinder_api_network}
1089 cinder::rabbit_userid: {get_input: rabbit_username}
1090 cinder::rabbit_password: {get_input: rabbit_password}
1091 cinder::rabbit_use_ssl: {get_input: rabbit_client_use_ssl}
1092 cinder::rabbit_port: {get_input: rabbit_client_port}
1093 cinder::debug: {get_input: debug}
1094 cinder_enable_iscsi_backend: {get_input: cinder_enable_iscsi_backend}
1095 cinder::glance::glance_api_servers: {get_input: glance_api_servers}
1096 cinder_backend_config: {get_input: CinderBackendConfig}
1097 cinder::db::mysql::password: {get_input: cinder_password}
1100 glance::api::bind_port: {get_input: glance_port}
1101 glance::api::bind_host: {get_input: glance_api_network}
1102 glance::api::auth_uri: {get_input: keystone_auth_uri}
1103 glance::api::identity_uri: {get_input: keystone_identity_uri}
1104 glance::api::registry_host: {get_input: glance_registry_host}
1105 glance::api::keystone_password: {get_input: glance_password}
1106 glance::api::debug: {get_input: debug}
1107 glance_notifier_strategy: {get_input: glance_notifier_strategy}
1108 glance_log_file: {get_input: glance_log_file}
1109 glance_log_file: {get_input: glance_log_file}
1110 glance::api::database_connection: {get_input: glance_dsn}
1111 glance::registry::keystone_password: {get_input: glance_password}
1112 glance::registry::database_connection: {get_input: glance_dsn}
1113 glance::registry::bind_host: {get_input: glance_registry_network}
1114 glance::registry::auth_uri: {get_input: keystone_auth_uri}
1115 glance::registry::identity_uri: {get_input: keystone_identity_uri}
1116 glance::registry::debug: {get_input: debug}
1117 glance::backend::swift::swift_store_auth_address: {get_input: keystone_auth_uri}
1118 glance::backend::swift::swift_store_user: service:glance
1119 glance::backend::swift::swift_store_key: {get_input: glance_password}
1120 glance_backend: {get_input: glance_backend}
1121 glance::db::mysql::password: {get_input: glance_password}
1122 glance_file_pcmk_device: {get_input: glance_file_pcmk_device}
1123 glance_file_pcmk_fstype: {get_input: glance_file_pcmk_fstype}
1124 glance_file_pcmk_manage: {get_input: glance_file_pcmk_manage}
1125 glance_file_pcmk_options: {get_input: glance_file_pcmk_options}
1128 heat_stack_domain_admin_password: {get_input: heat_stack_domain_admin_password}
1129 heat::engine::heat_watch_server_url: {get_input: heat.watch_server_url}
1130 heat::engine::heat_metadata_server_url: {get_input: heat.metadata_server_url}
1131 heat::engine::heat_waitcondition_server_url: {get_input: heat.waitcondition_server_url}
1132 heat::engine::auth_encryption_key: {get_input: heat_auth_encryption_key}
1133 heat::rabbit_userid: {get_input: rabbit_username}
1134 heat::rabbit_password: {get_input: rabbit_password}
1135 heat::rabbit_use_ssl: {get_input: rabbit_client_use_ssl}
1136 heat::rabbit_port: {get_input: rabbit_client_port}
1137 heat::auth_uri: {get_input: keystone_auth_uri}
1138 heat::keystone_ec2_uri: {get_input: keystone_ec2_uri}
1139 heat::identity_uri: {get_input: keystone_identity_uri}
1140 heat::keystone_password: {get_input: heat_password}
1141 heat::api::bind_host: {get_input: heat_api_network}
1142 heat::api_cloudwatch::bind_host: {get_input: heat_api_network}
1143 heat::api_cfn::bind_host: {get_input: heat_api_network}
1144 heat::database_connection: {get_input: heat_dsn}
1145 heat::debug: {get_input: debug}
1146 heat::db::mysql::password: {get_input: heat_password}
1149 keystone::admin_token: {get_input: admin_token}
1150 keystone_ca_certificate: {get_input: keystone_ca_certificate}
1151 keystone_signing_key: {get_input: keystone_signing_key}
1152 keystone_signing_certificate: {get_input: keystone_signing_certificate}
1153 keystone_ssl_certificate: {get_input: keystone_ssl_certificate}
1154 keystone_ssl_certificate_key: {get_input: keystone_ssl_certificate_key}
1155 keystone::database_connection: {get_input: keystone_dsn}
1156 keystone::public_bind_host: {get_input: keystone_public_api_network}
1157 keystone::admin_bind_host: {get_input: keystone_admin_api_network}
1158 keystone::debug: {get_input: debug}
1159 keystone::db::mysql::password: {get_input: admin_token}
1160 keystone::rabbit_userid: {get_input: rabbit_username}
1161 keystone::rabbit_password: {get_input: rabbit_password}
1162 keystone::rabbit_use_ssl: {get_input: rabbit_client_use_ssl}
1163 keystone::rabbit_port: {get_input: rabbit_client_port}
1164 keystone::notification_driver: {get_input: keystone_notification_driver}
1165 keystone::notification_format: {get_input: keystone_notification_format}
1166 keystone::roles::admin::email: {get_input: admin_email}
1167 keystone::roles::admin::password: {get_input: admin_password}
1168 keystone::endpoint::public_url: {get_input: keystone_public_url}
1169 keystone::endpoint::internal_url: {get_input: keystone_internal_url}
1170 keystone::endpoint::admin_url: {get_input: keystone_identity_uri}
1171 keystone::endpoint::region: {get_input: keystone_region}
1173 mongodb::server::bind_ip: {get_input: mongo_db_network}
1174 mongodb::server::nojournal: {get_input: mongodb_no_journal}
1176 admin_password: {get_input: admin_password}
1177 enable_galera: {get_input: enable_galera}
1178 enable_ceph_storage: {get_input: enable_ceph_storage}
1179 enable_swift_storage: {get_input: enable_swift_storage}
1180 mysql_innodb_buffer_pool_size: {get_input: mysql_innodb_buffer_pool_size}
1181 mysql_max_connections: {get_input: mysql_max_connections}
1182 mysql::server::root_password: {get_input: mysql_root_password}
1183 mysql_cluster_name: {get_input: mysql_cluster_name}
1184 mysql_bind_host: {get_input: mysql_network}
1185 mysql_virtual_ip: {get_input: mysql_virtual_ip}
1188 neutron::bind_host: {get_input: neutron_api_network}
1189 neutron::rabbit_password: {get_input: rabbit_password}
1190 neutron::rabbit_user: {get_input: rabbit_username}
1191 neutron::rabbit_use_ssl: {get_input: rabbit_client_use_ssl}
1192 neutron::rabbit_port: {get_input: rabbit_client_port}
1193 neutron::debug: {get_input: debug}
1194 neutron::server::auth_uri: {get_input: keystone_auth_uri}
1195 neutron::server::identity_uri: {get_input: keystone_identity_uri}
1196 neutron::server::database_connection: {get_input: neutron_dsn}
1197 neutron::agents::l3::external_network_bridge: {get_input: neutron_external_network_bridge}
1198 neutron::agents::ml2::ovs::enable_tunneling: {get_input: neutron_enable_tunneling}
1199 neutron::agents::ml2::ovs::l2_population: {get_input: neutron_enable_l2pop}
1200 neutron::agents::dhcp::enable_isolated_metadata: {get_input: neutron_enable_isolated_metadata}
1201 neutron::agents::ml2::ovs::local_ip: {get_input: neutron_local_ip}
1202 neutron_flat_networks: {get_input: neutron_flat_networks}
1203 neutron::agents::metadata::shared_secret: {get_input: neutron_metadata_proxy_shared_secret}
1204 neutron::agents::metadata::metadata_ip: {get_input: neutron_api_network}
1205 neutron_agent_mode: {get_input: neutron_agent_mode}
1206 neutron_router_distributed: {get_input: neutron_router_distributed}
1207 neutron::core_plugin: {get_input: neutron_core_plugin}
1208 neutron::service_plugins: {get_input: neutron_service_plugins}
1209 neutron::plugins::ml2::type_drivers: {get_input: neutron_type_drivers}
1210 neutron_mechanism_drivers: {get_input: neutron_mechanism_drivers}
1211 neutron::server::allow_automatic_l3agent_failover: {get_input: neutron_allow_l3agent_failover}
1212 neutron::server::l3_ha: {get_input: neutron_l3_ha}
1213 neutron::dhcp_agents_per_network: {get_input: neutron_dhcp_agents_per_network}
1214 neutron::plugins::ml2::network_vlan_ranges: {get_input: neutron_network_vlan_ranges}
1215 neutron::plugins::ml2::tunnel_id_ranges: {get_input: neutron_tunnel_id_ranges}
1216 neutron::plugins::ml2::vni_ranges: {get_input: neutron_vni_ranges}
1217 neutron_bridge_mappings: {get_input: neutron_bridge_mappings}
1218 neutron_public_interface: {get_input: neutron_public_interface}
1219 neutron_public_interface_raw_device: {get_input: neutron_public_interface_raw_device}
1220 neutron_public_interface_default_route: {get_input: neutron_public_interface_default_route}
1221 neutron_public_interface_tag: {get_input: neutron_public_interface_tag}
1222 neutron_tenant_network_type: {get_input: neutron_tenant_network_type}
1223 neutron_tunnel_types: {get_input: neutron_tunnel_types}
1224 neutron::server::auth_password: {get_input: neutron_password}
1225 neutron::agents::metadata::auth_password: {get_input: neutron_password}
1226 neutron_dnsmasq_options: {get_input: neutron_dnsmasq_options}
1227 neutron_dsn: {get_input: neutron_dsn}
1228 neutron::agents::metadata::auth_url: {get_input: keystone_identity_uri}
1229 neutron::db::mysql::password: {get_input: neutron_password}
1230 neutron::keystone::auth::public_url: {get_input: neutron_public_url }
1231 neutron::keystone::auth::internal_url: {get_input: neutron_internal_url }
1232 neutron::keystone::auth::admin_url: {get_input: neutron_admin_url }
1233 neutron::keystone::auth::password: {get_input: neutron_password }
1234 neutron::keystone::auth::region: {get_input: keystone_region}
1235 neutron::server::notifications::nova_url: {get_input: nova_internal_url}
1236 neutron::server::notifications::auth_url: {get_input: neutron_admin_auth_url}
1237 neutron::server::notifications::tenant_name: 'service'
1238 neutron::server::notifications::password: {get_input: nova_password}
1241 ceilometer_backend: {get_input: ceilometer_backend}
1242 ceilometer_mysql_conn_string: {get_input: ceilometer_dsn}
1243 ceilometer::metering_secret: {get_input: ceilometer_metering_secret}
1244 ceilometer::rabbit_userid: {get_input: rabbit_username}
1245 ceilometer::rabbit_password: {get_input: rabbit_password}
1246 ceilometer::rabbit_use_ssl: {get_input: rabbit_client_use_ssl}
1247 ceilometer::rabbit_port: {get_input: rabbit_client_port}
1248 ceilometer::debug: {get_input: debug}
1249 ceilometer::api::host: {get_input: ceilometer_api_network}
1250 ceilometer::api::keystone_password: {get_input: ceilometer_password}
1251 ceilometer::api::keystone_auth_uri: {get_input: keystone_auth_uri}
1252 ceilometer::api::keystone_identity_uri: {get_input: keystone_identity_uri}
1253 ceilometer::agent::auth::auth_password: {get_input: ceilometer_password}
1254 ceilometer::agent::auth::auth_url: {get_input: keystone_auth_uri}
1255 ceilometer::agent::central::coordination_url: {get_input: ceilometer_coordination_url}
1256 ceilometer::db::mysql::password: {get_input: ceilometer_password}
1257 snmpd_readonly_user_name: {get_input: snmpd_readonly_user_name}
1258 snmpd_readonly_user_password: {get_input: snmpd_readonly_user_password}
1261 nova::rabbit_userid: {get_input: rabbit_username}
1262 nova::rabbit_password: {get_input: rabbit_password}
1263 nova::rabbit_use_ssl: {get_input: rabbit_client_use_ssl}
1264 nova::rabbit_port: {get_input: rabbit_client_port}
1265 nova::debug: {get_input: debug}
1266 nova::api::auth_uri: {get_input: keystone_auth_uri}
1267 nova::api::identity_uri: {get_input: keystone_identity_uri}
1268 nova::api::api_bind_address: {get_input: nova_api_network}
1269 nova::api::metadata_listen: {get_input: nova_metadata_network}
1270 nova::api::admin_password: {get_input: nova_password}
1271 nova::database_connection: {get_input: nova_dsn}
1272 nova::glance_api_servers: {get_input: glance_api_servers}
1273 nova::api::neutron_metadata_proxy_shared_secret: {get_input: neutron_metadata_proxy_shared_secret}
1274 nova::network::neutron::neutron_admin_password: {get_input: neutron_password}
1275 nova::network::neutron::neutron_url: {get_input: neutron_internal_url}
1276 nova::network::neutron::neutron_admin_auth_url: {get_input: neutron_admin_auth_url}
1277 nova::vncproxy::host: {get_input: nova_api_network}
1278 nova::db::mysql::password: {get_input: nova_password}
1281 apache::ip: {get_input: horizon_network}
1282 horizon::allowed_hosts: {get_input: horizon_allowed_hosts}
1283 horizon::django_debug: {get_input: debug}
1284 horizon::secret_key: {get_input: horizon_secret}
1285 horizon::bind_address: {get_input: horizon_network}
1286 horizon::keystone_url: {get_input: keystone_auth_uri}
1289 rabbitmq::node_ip_address: {get_input: rabbitmq_network}
1290 rabbitmq::erlang_cookie: {get_input: rabbit_cookie}
1291 rabbitmq::file_limit: {get_input: rabbit_fd_limit}
1292 rabbitmq::default_user: {get_input: rabbit_username}
1293 rabbitmq::default_pass: {get_input: rabbit_password}
1295 redis::bind: {get_input: redis_network}
1296 redis_vip: {get_input: redis_vip}
1298 tripleo::firewall::manage_firewall: {get_input: manage_firewall}
1299 tripleo::firewall::purge_firewall_rules: {get_input: purge_firewall_rules}
1301 memcached::listen_ip: {get_input: memcached_network}
1302 neutron_public_interface_ip: {get_input: neutron_public_interface_ip}
1303 ntp::servers: {get_input: ntp_servers}
1304 control_virtual_interface: {get_input: control_virtual_interface}
1305 public_virtual_interface: {get_input: public_virtual_interface}
1306 tripleo::loadbalancer::control_virtual_interface: {get_input: control_virtual_interface}
1307 tripleo::loadbalancer::public_virtual_interface: {get_input: public_virtual_interface}
1308 tripleo::loadbalancer::haproxy_log_address: {get_input: haproxy_log_address}
1309 # NOTE(jaosorior): The service certificate configuration for
1310 # HAProxy was left commented because to properly use this, we
1311 # need to be able to set up the keystone endpoints. And
1312 # currently that is not possible, but is being addressed by
1313 # other commits. A subsequent commit will uncomment this.
1314 #tripleo::loadbalancer::service_certificate: {get_attr: [NodeTLSData, deployed_ssl_certificate_path]}
1315 tripleo::packages::enable_install: {get_input: enable_package_install}
1316 tripleo::packages::enable_upgrade: {get_input: enable_package_upgrade}
1318 # Hook for site-specific additional pre-deployment config, e.g extra hieradata
1319 ControllerExtraConfigPre:
1320 depends_on: ControllerDeployment
1321 type: OS::TripleO::ControllerExtraConfigPre
1323 server: {get_resource: Controller}
1325 # Hook for site-specific additional pre-deployment config,
1326 # applying to all nodes, e.g node registration/unregistration
1328 depends_on: [ControllerExtraConfigPre, NodeTLSData]
1329 type: OS::TripleO::NodeExtraConfig
1331 server: {get_resource: Controller}
1334 type: OS::TripleO::Tasks::PackageUpdate
1337 type: OS::Heat::SoftwareDeployment
1339 config: {get_resource: UpdateConfig}
1340 server: {get_resource: Controller}
1343 get_param: UpdateIdentifier
1347 description: IP address of the server in the ctlplane network
1348 value: {get_attr: [Controller, networks, ctlplane, 0]}
1349 external_ip_address:
1350 description: IP address of the server in the external network
1351 value: {get_attr: [ExternalPort, ip_address]}
1352 internal_api_ip_address:
1353 description: IP address of the server in the internal_api network
1354 value: {get_attr: [InternalApiPort, ip_address]}
1356 description: IP address of the server in the storage network
1357 value: {get_attr: [StoragePort, ip_address]}
1358 storage_mgmt_ip_address:
1359 description: IP address of the server in the storage_mgmt network
1360 value: {get_attr: [StorageMgmtPort, ip_address]}
1362 description: IP address of the server in the tenant network
1363 value: {get_attr: [TenantPort, ip_address]}
1365 description: Hostname of the server
1366 value: {get_attr: [Controller, name]}
1369 Node object in the format {ip: ..., name: ...} format that the corosync
1372 ip: {get_attr: [Controller, networks, ctlplane, 0]}
1373 name: {get_attr: [Controller, name]}
1376 Server's IP address and hostname in the /etc/hosts format
1379 template: IP HOST.localdomain HOST CLOUDNAME
1381 IP: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, ControllerHostnameResolveNetwork]}]}
1382 HOST: {get_attr: [Controller, name]}
1383 CLOUDNAME: {get_param: CloudName}
1384 nova_server_resource:
1385 description: Heat resource handle for the Nova compute server
1387 {get_resource: Controller}
1389 description: Swift device formatted for swift-ring-builder
1392 template: 'r1z1-IP:%PORT%/d1'
1394 IP: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, SwiftMgmtNetwork]}]}
1395 swift_proxy_memcache:
1396 description: Swift proxy-memcache value
1399 template: "IP:11211"
1401 IP: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, MemcachedNetwork]}]}
1403 description: identifier which changes if the controller configuration may need re-applying
1407 - - {get_attr: [ControllerDeployment, deploy_stdout]}
1408 - {get_attr: [NodeTLSCAData, deploy_stdout]}
1409 - {get_attr: [NodeTLSData, deploy_stdout]}
1410 - {get_attr: [ControllerExtraConfigPre, deploy_stdout]}
1411 - {get_param: UpdateIdentifier}
1412 tls_key_modulus_md5:
1413 description: MD5 checksum of the TLS Key Modulus
1414 value: {get_attr: [NodeTLSData, key_modulus_md5]}
1415 tls_cert_modulus_md5:
1416 description: MD5 checksum of the TLS Certificate Modulus
1417 value: {get_attr: [NodeTLSData, cert_modulus_md5]}