1 heat_template_version: 2016-04-08
4 OpenStack controller node configured by Puppet.
8 description: The password for the keystone admin account, used for monitoring, querying neutron etc.
15 description: The password for the aodh services.
18 CeilometerApiVirtualIP:
23 description: The ceilometer backend type.
25 CeilometerMeteringSecret:
26 description: Secret shared by the ceilometer services.
30 description: The password for the ceilometer service and db account.
33 CeilometerStoreEvents:
35 description: Whether to store events in ceilometer.
37 CeilometerMeterDispatcher:
39 description: Dispatcher to process meter data
42 - allowed_values: ['gnocchi', 'database']
48 description: Number of workers for Ceilometer service.
53 Whether to create cron job for purging soft deleted rows in Cinder database.
55 CinderEnableNfsBackend:
57 description: Whether to enable or not the NFS backend for Cinder
59 CinderEnableIscsiBackend:
61 description: Whether to enable or not the Iscsi backend for Cinder
63 CinderEnableRbdBackend:
65 description: Whether to enable or not the Rbd backend for Cinder
69 description: The iSCSI helper to use with cinder.
71 CinderLVMLoopDeviceSize:
73 description: The size of the loopback file used by the cinder LVM driver.
75 CinderNfsMountOptions:
78 Mount options for NFS mounts used by Cinder NFS backend. Effective
79 when CinderEnableNfsBackend is true.
84 NFS servers used by Cinder NFS backend. Effective when
85 CinderEnableNfsBackend is true.
86 type: comma_delimited_list
88 description: The password for the cinder service and db account, used by cinder-api.
93 description: Contains parameters to configure Cinder backends. Typically
94 set via parameter_defaults in the resource registry.
98 description: Number of workers for Cinder service.
100 controllerExtraConfig:
103 Deprecated. Use ControllerExtraConfig via parameter_defaults instead.
105 ControllerExtraConfig:
108 Controller specific hiera configuration data to inject into the cluster.
113 A network mapped list of IPs to assign to Controllers in the following form:
115 "internal_api": ["a.b.c.d", "e.f.g.h"],
119 ControlVirtualInterface:
121 description: Interface where virtual ip will be assigned.
125 description: Enable IPv6 in Corosync
129 description: Set to True to enable debugging on all services.
133 description: Whether to enable fencing in Pacemaker or not.
137 description: Whether to use Galera instead of regular MariaDB.
141 description: Whether to deploy a LoadBalancer on the Controller
145 description: Whether to deploy Ceph Storage (OSD) on the Controller
149 description: Whether to enable Swift Storage on the Controller
154 Additional hieradata to inject into the cluster, note that
155 ControllerExtraConfig takes precedence over ExtraConfig.
160 Pacemaker fencing configuration. The JSON should have
161 the following structure:
165 "agent": "AGENT_NAME",
166 "host_mac": "HOST_MAC_ADDRESS",
167 "params": {"PARAM_NAME": "PARAM_VALUE"}
175 "agent": "fence_xvm",
176 "host_mac": "52:54:00:aa:bb:cc",
178 "multicast_address": "225.0.0.12",
179 "port": "baremetal_0",
181 "manage_key_file": true,
182 "key_file": "/etc/fence_xvm.key",
183 "key_file_password": "abcdef"
190 description: Flavor for control nodes to request when deploying.
193 - custom_constraint: nova.flavor
196 description: The short name of the Gnocchi backend to use. Should be one
197 of swift, rbd, or file
200 - allowed_values: ['swift', 'file', 'rbd']
201 GnocchiIndexerBackend:
203 description: The short name of the Gnocchi indexer backend to use.
209 description: The password for the gnocchi service and db account.
212 HAProxyStatsPassword:
213 description: Password for HAProxy stats endpoint
216 description: User for HAProxy stats endpoint
219 HAProxySyslogAddress:
221 description: Syslog address where HAproxy will send its log
223 HeatAuthEncryptionKey:
224 description: Auth encryption key for heat-engine
229 description: A list of IP/Hostname allowed to connect to horizon
230 type: comma_delimited_list
232 description: Secret key for Django
237 default: overcloud-control
239 - custom_constraint: glance.image
241 default: 'REBUILD_PRESERVE_EPHEMERAL'
242 description: What policy to use when reconstructing instances. REBUILD for rebuilds, REBUILD_PRESERVE_EPHEMERAL to preserve /mnt.
244 InstanceNameTemplate:
245 default: 'instance-%08x'
246 description: Template string to be used to generate instance names
250 description: Name of an existing Nova key pair to enable SSH access to the instances
253 - custom_constraint: nova.keypair
257 description: Keystone region for endpoint
260 description: Whether to manage IPtables rules.
264 description: Enable IPv6 features in Memcached.
268 description: Whether IPtables rules should be purged before setting up the new ones.
275 description: The password for the sahara service account, used by sahara-api.
278 MysqlClusterUniquePart:
279 description: A unique identifier of the MySQL cluster the controller is in.
281 default: 'unset' # Has to be here because of the ignored empty value bug
282 # Drop the validation: https://bugs.launchpad.net/tripleo/+bug/1405446
284 # - length: {min: 4, max: 10}
285 MysqlInnodbBufferPoolSize:
287 Specifies the size of the buffer pool in megabytes. Setting to
288 zero should be interpreted as "no value" and will defer to the
293 description: Configures MySQL max_connections config setting
296 MysqlClustercheckPassword:
302 default: '' # Has to be here because of the ignored empty value bug
303 NeutronBridgeMappings:
305 The OVS logical->physical bridge mappings to use. See the Neutron
306 documentation for details. Defaults to mapping br-ex - the external
307 bridge on hosts - to a physical name 'datacentre' which can be used
308 to create provider networks (and we use this for the default floating
309 network) - if changing this either use different post-install network
310 scripts or be sure to keep 'datacentre' as a mapping network name.
311 type: comma_delimited_list
312 default: "datacentre:br-ex"
313 NeutronEnableOVSAgent:
314 description: Knob to enable/disable OVS Agent
319 description: Agent mode for the neutron-l3-agent on the controller hosts
323 description: Whether to enable l3-agent HA
327 description: Whether to configure Neutron Distributed Virtual Routers
329 NeutronMetadataProxySharedSecret:
330 description: Shared secret to prevent spoofing
336 The core plugin for Neutron. The value should be the entrypoint to be loaded
337 from neutron.core_plugins namespace.
339 NeutronServicePlugins:
340 default: "router,qos"
342 Comma-separated list of service plugin entrypoints to be loaded from the
343 neutron.service_plugins namespace.
344 type: comma_delimited_list
346 default: "vxlan,vlan,flat,gre"
348 Comma-separated list of network type driver entrypoints to be loaded.
349 type: comma_delimited_list
350 NeutronMechanismDrivers:
351 default: 'openvswitch'
353 The mechanism drivers for the Neutron tenant network.
354 type: comma_delimited_list
355 NeutronAllowL3AgentFailover:
357 description: Allow automatic l3-agent failover
359 NeutronEnableTunnelling:
365 Enable/disable the L2 population feature in the Neutron agents.
368 type: comma_delimited_list
369 default: 'datacentre'
370 description: If set, flat networks to configure in neutron plugins.
373 description: Whether to enable l3-agent HA
377 description: The tenant network type for Neutron.
378 type: comma_delimited_list
379 NeutronNetworkVLANRanges:
380 default: 'datacentre:1:1000'
382 The Neutron ML2 and OpenVSwitch vlan mapping range to support. See the
383 Neutron documentation for permitted values. Defaults to permitting any
384 VLAN on the 'datacentre' physical network (See NeutronBridgeMappings).
385 type: comma_delimited_list
387 description: The password for the neutron service and db account, used by neutron agents.
390 NeutronPublicInterface:
392 description: What interface to bridge onto br-ex for network nodes.
394 NeutronPublicInterfaceTag:
397 VLAN tag for creating a public VLAN. The tag will be used to
398 create an access port on the exterior bridge for each control plane node,
399 and that port will be given the IP address returned by neutron from the
400 public network. Set CONTROLEXTRA=overcloud-vlan-port.yaml when compiling
401 overcloud.yaml to include the deployment of VLAN ports to the control
404 NeutronPublicInterfaceDefaultRoute:
406 description: A custom default route for the NeutronPublicInterface.
408 NeutronPublicInterfaceIP:
410 description: A custom IP address to put onto the NeutronPublicInterface.
412 NeutronPublicInterfaceRawDevice:
414 description: If set, the public interface is a vlan with this device as the raw device.
418 The default MTU for tenant networks. For VXLAN/GRE tunneling, this should
419 be at least 50 bytes smaller than the MTU on the physical network. This
420 value will be used to set the MTU on the virtual Ethernet device.
421 This number is related to the value of NeutronDnsmasqOptions, since that
422 will determine the MTU that is assigned to the VM host through DHCP.
428 The tunnel types for the Neutron tenant network.
429 type: comma_delimited_list
430 NeutronTunnelIdRanges:
432 Comma-separated list of <tun_min>:<tun_max> tuples enumerating ranges
433 of GRE tunnel IDs that are available for tenant network allocation
434 default: ["1:4094", ]
435 type: comma_delimited_list
438 Comma-separated list of <vni_min>:<vni_max> tuples enumerating ranges
439 of VXLAN VNI IDs that are available for tenant network allocation
440 default: ["1:4094", ]
441 type: comma_delimited_list
442 NeutronPluginExtensions:
443 default: "qos,port_security"
445 Comma-separated list of extensions enabled for the Neutron plugin.
446 type: comma_delimited_list
447 NeutronAgentExtensions:
450 Comma-separated list of extensions enabled for the Neutron agents.
451 type: comma_delimited_list
457 description: Number of workers for Neutron service.
462 Whether to create cron job for purging soft deleted rows in Nova database.
466 description: Enable IPv6 features in Nova
469 description: The password for the nova service and db account, used by nova-api.
474 description: Number of workers for Nova service.
478 description: Should MongoDb journaling be disabled
482 description: Enable IPv6 if Mongo DB VIP is IPv6
486 description: Comma-separated list of ntp servers
487 type: comma_delimited_list
490 description: The password for the 'pcsd' user.
492 PublicVirtualInterface:
495 Specifies the interface where the public-facing virtual ip will be assigned.
496 This should be int_public when a VLAN is being used.
500 default: '' # Has to be here because of the ignored empty value bug
503 default: '' # Has to be here because of the ignored empty value bug
506 description: The password for RabbitMQ
511 description: The username for RabbitMQ
516 Rabbit client subscriber parameter to specify
517 an SSL connection to the RabbitMQ host.
521 description: Set rabbit subscriber port, change this if using SSL
525 description: The password to access the Redis service
529 default: '' # Has to be here because of the ignored empty value bug
532 default: '' # Has to be here because of the ignored empty value bug
533 description: An IP address which is wrapped in brackets in case of IPv6
534 SnmpdReadonlyUserName:
535 default: ro_snmp_user
536 description: The user name for SNMPd with readonly rights running on all Overcloud nodes
538 SnmpdReadonlyUserPassword:
539 description: The user password for SNMPd with readonly rights running on all Overcloud nodes
543 description: A random string to be used as a salt when hashing to determine mappings
549 description: Value of mount_check in Swift account/container/object -server.conf
554 description: The minimum time (in hours) before a partition in a ring can be moved following a rebalance.
557 description: Partition Power to use when building Swift rings
561 description: Whether to manage Swift rings or not
569 description: How many replicas to use in the swift rings.
572 description: The timezone to be set on controller nodes.
574 UpgradeLevelNovaCompute:
576 description: Nova Compute upgrade level
578 VirtualIP: # DEPRECATED: use per service settings instead
580 default: '' # Has to be here because of the ignored empty value bug
593 EnablePackageInstall:
595 description: Set to true to enable package installation via Puppet
599 description: Mapping of service_name -> network name. Typically set
600 via parameter_defaults in the resource registry.
604 description: Mapping of service endpoint -> protocol. Typically set
605 via parameter_defaults in the resource registry.
611 Setting to a previously unused value during stack-update will trigger
612 package update on all nodes
615 default: '' # Defaults to Heat created hostname
619 description: Optional mapping to override hostnames
620 NetworkDeploymentActions:
621 type: comma_delimited_list
623 Heat action when to apply network configuration changes
628 SoftwareConfigTransport:
629 default: POLL_SERVER_CFN
631 How the server should receive the metadata required for software configuration.
634 - allowed_values: [POLL_SERVER_CFN, POLL_SERVER_HEAT, POLL_TEMP_URL, ZAQAR_MESSAGE]
639 The DNS domain used for the hosts. This should match the dhcp_domain
640 configured in the Undercloud neutron. Defaults to localdomain.
644 Extra properties or metadata passed to Nova for the created nodes in
645 the overcloud. It's accessible via the Nova metadata API.
649 description: Optional scheduler hints to pass to nova
651 ServiceConfigSettings:
657 description: Do not use deprecated params, they will be removed.
659 - controllerExtraConfig
664 type: OS::Nova::Server
666 image: {get_param: Image}
667 image_update_policy: {get_param: ImageUpdatePolicy}
668 flavor: {get_param: Flavor}
669 key_name: {get_param: KeyName}
672 user_data_format: SOFTWARE_CONFIG
673 user_data: {get_resource: UserData}
676 template: {get_param: Hostname}
677 params: {get_param: HostnameMap}
678 software_config_transport: {get_param: SoftwareConfigTransport}
679 metadata: {get_param: ServerMetadata}
680 scheduler_hints: {get_param: SchedulerHints}
682 # Combine the NodeAdminUserData and NodeUserData mime archives
684 type: OS::Heat::MultipartMime
687 - config: {get_resource: NodeAdminUserData}
689 - config: {get_resource: NodeUserData}
692 # Creates the "heat-admin" user if configured via the environment
693 # Should return a OS::Heat::MultipartMime reference via OS::stack_id
695 type: OS::TripleO::NodeAdminUserData
697 # For optional operator additional userdata
698 # Should return a OS::Heat::MultipartMime reference via OS::stack_id
700 type: OS::TripleO::NodeUserData
703 type: OS::TripleO::Controller::Ports::ExternalPort
705 IPPool: {get_param: ControllerIPs}
706 NodeIndex: {get_param: NodeIndex}
707 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
710 type: OS::TripleO::Controller::Ports::InternalApiPort
712 IPPool: {get_param: ControllerIPs}
713 NodeIndex: {get_param: NodeIndex}
714 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
717 type: OS::TripleO::Controller::Ports::StoragePort
719 IPPool: {get_param: ControllerIPs}
720 NodeIndex: {get_param: NodeIndex}
721 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
724 type: OS::TripleO::Controller::Ports::StorageMgmtPort
726 IPPool: {get_param: ControllerIPs}
727 NodeIndex: {get_param: NodeIndex}
728 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
731 type: OS::TripleO::Controller::Ports::TenantPort
733 IPPool: {get_param: ControllerIPs}
734 NodeIndex: {get_param: NodeIndex}
735 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
738 type: OS::TripleO::Controller::Ports::ManagementPort
740 IPPool: {get_param: ControllerIPs}
741 NodeIndex: {get_param: NodeIndex}
742 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
745 type: OS::TripleO::Network::Ports::NetIpMap
747 ControlPlaneIp: {get_attr: [Controller, networks, ctlplane, 0]}
748 ExternalIp: {get_attr: [ExternalPort, ip_address]}
749 ExternalIpSubnet: {get_attr: [ExternalPort, ip_subnet]}
750 ExternalIpUri: {get_attr: [ExternalPort, ip_address_uri]}
751 InternalApiIp: {get_attr: [InternalApiPort, ip_address]}
752 InternalApiIpSubnet: {get_attr: [InternalApiPort, ip_subnet]}
753 InternalApiIpUri: {get_attr: [InternalApiPort, ip_address_uri]}
754 StorageIp: {get_attr: [StoragePort, ip_address]}
755 StorageIpSubnet: {get_attr: [StoragePort, ip_subnet]}
756 StorageIpUri: {get_attr: [StoragePort, ip_address_uri]}
757 StorageMgmtIp: {get_attr: [StorageMgmtPort, ip_address]}
758 StorageMgmtIpSubnet: {get_attr: [StorageMgmtPort, ip_subnet]}
759 StorageMgmtIpUri: {get_attr: [StorageMgmtPort, ip_address_uri]}
760 TenantIp: {get_attr: [TenantPort, ip_address]}
761 TenantIpSubnet: {get_attr: [TenantPort, ip_subnet]}
762 TenantIpUri: {get_attr: [TenantPort, ip_address_uri]}
763 ManagementIp: {get_attr: [ManagementPort, ip_address]}
764 ManagementIpSubnet: {get_attr: [ManagementPort, ip_subnet]}
765 ManagementIpUri: {get_attr: [ManagementPort, ip_address_uri]}
768 type: OS::TripleO::Controller::Net::SoftwareConfig
770 ControlPlaneIp: {get_attr: [Controller, networks, ctlplane, 0]}
771 ExternalIpSubnet: {get_attr: [ExternalPort, ip_subnet]}
772 InternalApiIpSubnet: {get_attr: [InternalApiPort, ip_subnet]}
773 StorageIpSubnet: {get_attr: [StoragePort, ip_subnet]}
774 StorageMgmtIpSubnet: {get_attr: [StorageMgmtPort, ip_subnet]}
775 TenantIpSubnet: {get_attr: [TenantPort, ip_subnet]}
776 ManagementIpSubnet: {get_attr: [ManagementPort, ip_subnet]}
779 type: OS::TripleO::SoftwareDeployment
781 name: NetworkDeployment
782 config: {get_resource: NetworkConfig}
783 server: {get_resource: Controller}
784 actions: {get_param: NetworkDeploymentActions}
787 interface_name: {get_param: NeutronPublicInterface}
789 # Resource for site-specific injection of root certificate
791 depends_on: NetworkDeployment
792 type: OS::TripleO::NodeTLSCAData
794 server: {get_resource: Controller}
796 # Resource for site-specific passing of private keys/certificates
798 depends_on: NodeTLSCAData
799 type: OS::TripleO::NodeTLSData
801 server: {get_resource: Controller}
802 NodeIndex: {get_param: NodeIndex}
805 ControllerDeployment:
806 type: OS::TripleO::SoftwareDeployment
807 depends_on: NetworkDeployment
809 name: ControllerDeployment
810 config: {get_resource: ControllerConfig}
811 server: {get_resource: Controller}
813 bootstack_nodeid: {get_attr: [Controller, name]}
814 ceilometer_workers: {get_param: CeilometerWorkers}
815 cinder_workers: {get_param: CinderWorkers}
816 nova_workers: {get_param: NovaWorkers}
817 neutron_workers: {get_param: NeutronWorkers}
818 neutron_enable_tunneling: {get_param: NeutronEnableTunnelling}
819 neutron_enable_l2pop: {get_param: NeutronEnableL2Pop}
820 haproxy_log_address: {get_param: HAProxySyslogAddress}
821 haproxy_stats_password: {get_param: HAProxyStatsPassword}
822 haproxy_stats_user: {get_param: HAProxyStatsUser}
823 heat_auth_encryption_key: {get_param: HeatAuthEncryptionKey}
824 horizon_allowed_hosts: {get_param: HorizonAllowedHosts}
825 horizon_secret: {get_param: HorizonSecret}
826 admin_password: {get_param: AdminPassword}
827 neutron_public_interface_ip: {get_param: NeutronPublicInterfaceIP}
828 debug: {get_param: Debug}
829 cinder_enable_db_purge: {get_param: CinderEnableDBPurge}
830 cinder_enable_nfs_backend: {get_param: CinderEnableNfsBackend}
831 cinder_enable_rbd_backend: {get_param: CinderEnableRbdBackend}
832 cinder_nfs_mount_options: {get_param: CinderNfsMountOptions}
837 SERVERS: {get_param: CinderNfsServers}
838 cinder_lvm_loop_device_size: {get_param: CinderLVMLoopDeviceSize}
839 cinder_password: {get_param: CinderPassword}
840 cinder_enable_iscsi_backend: {get_param: CinderEnableIscsiBackend}
841 cinder_iscsi_helper: {get_param: CinderISCSIHelper}
842 cinder_backend_config: {get_param: CinderBackendConfig}
846 - - {get_param: [EndpointMap, MysqlInternal, protocol]}
848 - {get_param: CinderPassword}
850 - {get_param: [EndpointMap, MysqlInternal, host]}
852 cinder_public_url: {get_param: [EndpointMap, CinderPublic, uri]}
853 cinder_internal_url: {get_param: [EndpointMap, CinderInternal, uri]}
854 cinder_admin_url: {get_param: [EndpointMap, CinderAdmin, uri]}
855 cinder_public_url_v2: {get_param: [EndpointMap, CinderV2Public, uri]}
856 cinder_internal_url_v2: {get_param: [EndpointMap, CinderV2Internal, uri]}
857 cinder_admin_url_v2: {get_param: [EndpointMap, CinderV2Admin, uri]}
858 keystone_identity_uri: { get_param: [EndpointMap, KeystoneAdmin, uri_no_suffix] }
859 keystone_auth_uri: {get_param: [EndpointMap, KeystoneInternal, uri] }
860 keystone_ec2_uri: { get_param: [EndpointMap, KeystoneEC2, uri] }
861 enable_fencing: {get_param: EnableFencing}
862 enable_galera: {get_param: EnableGalera}
863 enable_load_balancer: {get_param: EnableLoadBalancer}
864 enable_ceph_storage: {get_param: EnableCephStorage}
865 enable_swift_storage: {get_param: EnableSwiftStorage}
866 manage_firewall: {get_param: ManageFirewall}
867 purge_firewall_rules: {get_param: PurgeFirewallRules}
868 mysql_innodb_buffer_pool_size: {get_param: MysqlInnodbBufferPoolSize}
869 mysql_max_connections: {get_param: MysqlMaxConnections}
870 mysql_root_password: {get_param: MysqlRootPassword}
871 mysql_clustercheck_password: {get_param: MysqlClustercheckPassword}
874 template: tripleo-CLUSTER
876 CLUSTER: {get_param: MysqlClusterUniquePart}
877 neutron_flat_networks:
881 NETWORKS: {get_param: NeutronFlatNetworks}
882 neutron_metadata_proxy_shared_secret: {get_param: NeutronMetadataProxySharedSecret}
883 neutron_agent_mode: {get_param: NeutronAgentMode}
884 neutron_router_distributed: {get_param: NeutronDVR}
885 neutron_core_plugin: {get_param: NeutronCorePlugin}
886 neutron_service_plugins:
890 PLUGINS: {get_param: NeutronServicePlugins}
891 neutron_type_drivers:
895 DRIVERS: {get_param: NeutronTypeDrivers}
896 neutron_enable_ovs_agent: {get_param: NeutronEnableOVSAgent}
897 neutron_mechanism_drivers:
901 MECHANISMS: {get_param: NeutronMechanismDrivers}
902 neutron_allow_l3agent_failover: {get_param: NeutronAllowL3AgentFailover}
903 neutron_l3_ha: {get_param: NeutronL3HA}
904 neutron_network_vlan_ranges:
908 RANGES: {get_param: NeutronNetworkVLANRanges}
909 neutron_bridge_mappings:
913 MAPPINGS: {get_param: NeutronBridgeMappings}
914 neutron_public_interface: {get_param: NeutronPublicInterface}
915 neutron_public_interface_raw_device: {get_param: NeutronPublicInterfaceRawDevice}
916 neutron_public_interface_default_route: {get_param: NeutronPublicInterfaceDefaultRoute}
917 neutron_public_interface_tag: {get_param: NeutronPublicInterfaceTag}
918 neutron_tunnel_id_ranges:
922 RANGES: {get_param: NeutronTunnelIdRanges}
927 RANGES: {get_param: NeutronVniRanges}
928 neutron_tenant_network_types:
932 TYPES: {get_param: NeutronNetworkType}
933 neutron_tunnel_types:
937 TYPES: {get_param: NeutronTunnelTypes}
938 neutron_plugin_extensions:
940 template: PLUGIN_EXTENSIONS
942 PLUGIN_EXTENSIONS: {get_param: NeutronPluginExtensions}
943 neutron_agent_extensions:
945 template: AGENT_EXTENSIONS
947 AGENT_EXTENSIONS: {get_param: NeutronAgentExtensions}
948 neutron_password: {get_param: NeutronPassword}
949 neutron_tenant_mtu: {get_param: NeutronTenantMtu}
953 - - {get_param: [EndpointMap, MysqlInternal, protocol]}
955 - {get_param: NeutronPassword}
957 - {get_param: [EndpointMap, MysqlInternal, host]}
958 - '/ovs_neutron?charset=utf8'
959 neutron_internal_url: { get_param: [ EndpointMap, NeutronInternal, uri ] }
960 neutron_public_url: { get_param: [ EndpointMap, NeutronPublic, uri ] }
961 neutron_admin_url: { get_param: [ EndpointMap, NeutronAdmin, uri ] }
962 neutron_auth_url: { get_param: [ EndpointMap, KeystoneV3Admin, uri ] }
963 nova_internal_url: { get_param: [ EndpointMap, NovaInternal, uri ] }
964 ceilometer_backend: {get_param: CeilometerBackend}
965 ceilometer_metering_secret: {get_param: CeilometerMeteringSecret}
966 ceilometer_password: {get_param: CeilometerPassword}
967 ceilometer_store_events: {get_param: CeilometerStoreEvents}
968 aodh_password: {get_param: AodhPassword}
969 aodh_internal_url: { get_param: [ EndpointMap, AodhInternal, uri ] }
970 aodh_public_url: { get_param: [ EndpointMap, AodhPublic, uri ] }
971 aodh_admin_url: { get_param: [ EndpointMap, AodhAdmin, uri ] }
972 ceilometer_meter_dispatcher: {get_param: CeilometerMeterDispatcher}
973 gnocchi_password: {get_param: GnocchiPassword}
974 gnocchi_backend: {get_param: GnocchiBackend}
975 gnocchi_indexer_backend: {get_param: GnocchiIndexerBackend}
976 ceilometer_coordination_url:
980 - {get_param: RedisPassword}
982 - {get_param: RedisVirtualIPUri}
987 - - {get_param: [EndpointMap, MysqlInternal, protocol]}
989 - {get_param: CeilometerPassword}
991 - {get_param: [EndpointMap, MysqlInternal, host]}
996 - - {get_param: [EndpointMap, MysqlInternal, protocol]}
998 - {get_param: GnocchiPassword}
1000 - {get_param: [EndpointMap, MysqlInternal, host]}
1002 gnocchi_internal_url: {get_param: [EndpointMap, GnocchiInternal, uri]}
1003 gnocchi_public_url: { get_param: [ EndpointMap, GnocchiPublic, uri ] }
1004 gnocchi_admin_url: { get_param: [ EndpointMap, GnocchiAdmin, uri ] }
1005 ceilometer_public_url: {get_param: [EndpointMap, CeilometerPublic, uri]}
1006 ceilometer_internal_url: {get_param: [EndpointMap, CeilometerInternal, uri]}
1007 ceilometer_admin_url: {get_param: [EndpointMap, CeilometerAdmin, uri]}
1008 snmpd_readonly_user_name: {get_param: SnmpdReadonlyUserName}
1009 snmpd_readonly_user_password: {get_param: SnmpdReadonlyUserPassword}
1010 nova_enable_db_purge: {get_param: NovaEnableDBPurge}
1011 nova_ipv6: {get_param: NovaIPv6}
1012 corosync_ipv6: {get_param: CorosyncIPv6}
1013 memcached_ipv6: {get_param: MemcachedIPv6}
1014 nova_password: {get_param: NovaPassword}
1018 - - {get_param: [EndpointMap, MysqlInternal, protocol]}
1020 - {get_param: NovaPassword}
1022 - {get_param: [EndpointMap, MysqlInternal, host]}
1027 - - {get_param: [EndpointMap, MysqlInternal, protocol]}
1029 - {get_param: NovaPassword}
1031 - {get_param: [EndpointMap, MysqlInternal, host]}
1033 upgrade_level_nova_compute: {get_param: UpgradeLevelNovaCompute}
1034 instance_name_template: {get_param: InstanceNameTemplate}
1035 nova_public_url: {get_param: [EndpointMap, NovaPublic, uri]}
1036 nova_internal_url: {get_param: [EndpointMap, NovaInternal, uri]}
1037 nova_admin_url: {get_param: [EndpointMap, NovaAdmin, uri]}
1038 fencing_config: {get_param: FencingConfig}
1039 pcsd_password: {get_param: PcsdPassword}
1040 rabbit_username: {get_param: RabbitUserName}
1041 rabbit_password: {get_param: RabbitPassword}
1042 rabbit_cookie: {get_param: RabbitCookie}
1043 rabbit_client_use_ssl: {get_param: RabbitClientUseSSL}
1044 rabbit_client_port: {get_param: RabbitClientPort}
1045 mongodb_no_journal: {get_param: MongoDbNoJournal}
1046 mongodb_ipv6: {get_param: MongoDbIPv6}
1047 ntp_servers: {get_param: NtpServer}
1048 timezone: {get_param: TimeZone}
1049 control_virtual_interface: {get_param: ControlVirtualInterface}
1050 public_virtual_interface: {get_param: PublicVirtualInterface}
1051 swift_hash_suffix: {get_param: SwiftHashSuffix}
1052 swift_part_power: {get_param: SwiftPartPower}
1053 swift_ring_build: {get_param: SwiftRingBuild}
1054 swift_replicas: {get_param: SwiftReplicas}
1055 swift_min_part_hours: {get_param: SwiftMinPartHours}
1056 swift_mount_check: {get_param: SwiftMountCheck}
1057 enable_package_install: {get_param: EnablePackageInstall}
1058 enable_package_upgrade: {get_attr: [UpdateDeployment, update_managed_packages]}
1059 sahara_password: {get_param: SaharaPassword}
1060 sahara_public_url: {get_param: [EndpointMap, SaharaPublic, uri]}
1061 sahara_internal_url: {get_param: [EndpointMap, SaharaInternal, uri]}
1062 sahara_admin_url: {get_param: [EndpointMap, SaharaAdmin, uri]}
1066 - - {get_param: [EndpointMap, MysqlInternal, protocol]}
1068 - {get_param: SaharaPassword}
1070 - {get_param: [EndpointMap, MysqlInternal, host]}
1072 swift_proxy_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, SwiftProxyNetwork]}]}
1073 swift_management_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, SwiftMgmtNetwork]}]}
1074 cinder_iscsi_network:
1078 IP: {get_attr: [NetIpMap, net_ip_uri_map, {get_param: [ServiceNetMap, CinderIscsiNetwork]}]}
1079 cinder_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, CinderApiNetwork]}]}
1080 glance_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, GlanceApiNetwork]}]}
1081 glance_registry_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, GlanceRegistryNetwork]}]}
1082 glance_api_servers: { get_param: [EndpointMap, GlanceInternal, uri]}
1083 heat_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, HeatApiNetwork]}]}
1084 keystone_public_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, KeystonePublicApiNetwork]}]}
1085 keystone_admin_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, KeystoneAdminApiNetwork]}]}
1086 keystone_region: {get_param: KeystoneRegion}
1087 mongo_db_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, MongoDbNetwork]}]}
1088 neutron_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, NeutronApiNetwork]}]}
1089 neutron_local_ip: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, NeutronTenantNetwork]}]}
1090 ceilometer_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, CeilometerApiNetwork]}]}
1091 aodh_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, AodhApiNetwork]}]}
1092 gnocchi_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, GnocchiApiNetwork]}]}
1093 nova_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, NovaApiNetwork]}]}
1094 nova_metadata_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, NovaMetadataNetwork]}]}
1095 horizon_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, HorizonNetwork]}]}
1098 template: "['SUBNET']"
1100 SUBNET: {get_attr: [NetIpMap, net_ip_subnet_map, {get_param: [ServiceNetMap, HorizonNetwork]}]}
1101 rabbitmq_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, RabbitMqNetwork]}]}
1102 redis_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, RedisNetwork]}]}
1103 redis_password: {get_param: RedisPassword}
1104 redis_vip: {get_param: RedisVirtualIP}
1105 sahara_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, SaharaApiNetwork]}]}
1106 memcached_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, MemcachedNetwork]}]}
1107 mysql_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, MysqlNetwork]}]}
1108 mysql_virtual_ip: {get_param: MysqlVirtualIP}
1109 ceph_cluster_network: {get_attr: [NetIpMap, net_ip_subnet_map, {get_param: [ServiceNetMap, CephClusterNetwork]}]}
1110 ceph_public_network: {get_attr: [NetIpMap, net_ip_subnet_map, {get_param: [ServiceNetMap, CephPublicNetwork]}]}
1111 ceph_public_ip: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, CephPublicNetwork]}]}
1113 # Map heat metadata into hiera datafiles
1115 type: OS::Heat::StructuredConfig
1117 group: os-apply-config
1122 - heat_config_%{::deploy_config_name}
1123 - controller_extraconfig
1129 - swift_devices_and_proxy # provided by SwiftDevicesAndProxyConfig
1130 - ceph_cluster # provided by CephClusterConfig
1132 - bootstrap_node # provided by BootstrapNodeConfig
1133 - all_nodes # provided by allNodesConfig
1134 - vip_data # provided by vip-config
1138 - cinder_dellsc_data # Optionally provided by ControllerExtraConfigPre
1139 - cinder_netapp_data # Optionally provided by ControllerExtraConfigPre
1140 - cinder_eqlx_data # Optionally provided by ControllerExtraConfigPre
1141 - neutron_bigswitch_data # Optionally provided by ControllerExtraConfigPre
1142 - neutron_cisco_data # Optionally provided by ControllerExtraConfigPre
1143 - cisco_n1kv_data # Optionally provided by ControllerExtraConfigPre
1144 - neutron_nuage_data # Optionally provided by ControllerExtraConfigPre
1145 - midonet_data #Optionally provided by AllNodesExtraConfig
1146 - neutron_opencontrail_data # Optionally provided by ControllerExtraConfigPre
1147 - neutron_plumgrid_data # Optionally provided by ControllerExtraConfigPre
1148 merge_behavior: deeper
1151 mapped_data: {get_param: ServiceConfigSettings}
1152 controller_extraconfig:
1155 - {get_param: controllerExtraConfig}
1156 - {get_param: ControllerExtraConfig}
1158 mapped_data: {get_param: ExtraConfig}
1160 raw_data: {get_file: hieradata/common.yaml}
1163 net_ip_map: {get_attr: [NetIpMap, net_ip_map]}
1164 net_ip_subnet_map: {get_attr: [NetIpMap, net_ip_subnet_map]}
1165 net_ip_uri_map: {get_attr: [NetIpMap, net_ip_uri_map]}
1167 raw_data: {get_file: hieradata/ceph.yaml}
1169 ceph::profile::params::cluster_network: {get_input: ceph_cluster_network}
1170 ceph::profile::params::public_network: {get_input: ceph_public_network}
1171 ceph::profile::params::public_addr: {get_input: ceph_public_ip}
1173 raw_data: {get_file: hieradata/database.yaml}
1175 raw_data: {get_file: hieradata/object.yaml}
1177 raw_data: {get_file: hieradata/controller.yaml}
1178 mapped_data: # data supplied directly to this deployment configuration, etc
1179 bootstack_nodeid: {get_input: bootstack_nodeid}
1182 enable_fencing: {get_input: enable_fencing}
1183 enable_load_balancer: {get_input: enable_load_balancer}
1184 hacluster_pwd: {get_input: pcsd_password}
1185 corosync_ipv6: {get_input: corosync_ipv6}
1186 tripleo::fencing::config: {get_input: fencing_config}
1189 # FIXME: need to move proxy_local_net_ip into swift-proxy.yaml
1190 swift::proxy::proxy_local_net_ip: {get_input: swift_proxy_network}
1191 swift::storage::all::storage_local_net_ip: {get_input: swift_management_network}
1192 swift::swift_hash_path_suffix: {get_input: swift_hash_suffix}
1193 tripleo::ringbuilder::build_ring: { get_input: swift_ring_build }
1194 tripleo::ringbuilder::part_power: {get_input: swift_part_power}
1195 tripleo::ringbuilder::replicas: {get_input: swift_replicas}
1196 tripleo::ringbuilder::min_part_hours: {get_input: swift_min_part_hours}
1197 swift_mount_check: {get_input: swift_mount_check}
1200 cinder_enable_db_purge: {get_input: cinder_enable_db_purge}
1201 cinder_enable_nfs_backend: {get_input: cinder_enable_nfs_backend}
1202 cinder_enable_rbd_backend: {get_input: cinder_enable_rbd_backend}
1203 cinder_nfs_mount_options: {get_input: cinder_nfs_mount_options}
1204 cinder_nfs_servers: {get_input: cinder_nfs_servers}
1205 cinder_lvm_loop_device_size: {get_input: cinder_lvm_loop_device_size}
1206 cinder_iscsi_helper: {get_input: cinder_iscsi_helper}
1207 cinder_iscsi_ip_address: {get_input: cinder_iscsi_network}
1208 cinder::database_connection: {get_input: cinder_dsn}
1209 cinder::api::keystone_password: {get_input: cinder_password}
1210 cinder::api::auth_uri: {get_input: keystone_auth_uri}
1211 cinder::api::identity_uri: {get_input: keystone_identity_uri}
1212 cinder::api::bind_host: {get_input: cinder_api_network}
1213 cinder::rabbit_userid: {get_input: rabbit_username}
1214 cinder::rabbit_password: {get_input: rabbit_password}
1215 cinder::rabbit_use_ssl: {get_input: rabbit_client_use_ssl}
1216 cinder::rabbit_port: {get_input: rabbit_client_port}
1217 cinder::debug: {get_input: debug}
1218 cinder_enable_iscsi_backend: {get_input: cinder_enable_iscsi_backend}
1219 cinder::glance::glance_api_servers: {get_input: glance_api_servers}
1220 cinder_backend_config: {get_input: CinderBackendConfig}
1221 cinder::db::mysql::password: {get_input: cinder_password}
1222 cinder::keystone::auth::public_url: {get_input: cinder_public_url }
1223 cinder::keystone::auth::internal_url: {get_input: cinder_internal_url }
1224 cinder::keystone::auth::admin_url: {get_input: cinder_admin_url }
1225 cinder::keystone::auth::public_url_v2: {get_input: cinder_public_url_v2 }
1226 cinder::keystone::auth::internal_url_v2: {get_input: cinder_internal_url_v2 }
1227 cinder::keystone::auth::admin_url_v2: {get_input: cinder_admin_url_v2 }
1228 cinder::keystone::auth::password: {get_input: cinder_password }
1229 cinder::keystone::auth::region: {get_input: keystone_region}
1232 glance::api::bind_host: {get_input: glance_api_network}
1233 glance::registry::bind_host: {get_input: glance_registry_network}
1234 glance::keystone::auth::region: {get_input: keystone_region}
1237 heat::api::bind_host: {get_input: heat_api_network}
1238 heat::api_cloudwatch::bind_host: {get_input: heat_api_network}
1239 heat::api_cfn::bind_host: {get_input: heat_api_network}
1240 heat::engine::auth_encryption_key: {get_input: heat_auth_encryption_key}
1243 keystone::admin_bind_host: {get_input: keystone_admin_api_network}
1244 keystone::public_bind_host: {get_input: keystone_public_api_network}
1245 keystone::wsgi::apache::bind_host: {get_input: keystone_public_api_network}
1246 keystone::wsgi::apache::admin_bind_host: {get_input: keystone_admin_api_network}
1248 mongodb::server::bind_ip: {get_input: mongo_db_network}
1249 mongodb::server::nojournal: {get_input: mongodb_no_journal}
1250 mongodb::server::ipv6: {get_input: mongodb_ipv6}
1252 admin_password: {get_input: admin_password}
1253 enable_galera: {get_input: enable_galera}
1254 enable_ceph_storage: {get_input: enable_ceph_storage}
1255 enable_swift_storage: {get_input: enable_swift_storage}
1256 mysql_innodb_buffer_pool_size: {get_input: mysql_innodb_buffer_pool_size}
1257 mysql_max_connections: {get_input: mysql_max_connections}
1258 mysql::server::root_password: {get_input: mysql_root_password}
1259 mysql_clustercheck_password: {get_input: mysql_clustercheck_password}
1260 mysql_cluster_name: {get_input: mysql_cluster_name}
1261 mysql_bind_host: {get_input: mysql_network}
1262 mysql_virtual_ip: {get_input: mysql_virtual_ip}
1265 neutron::bind_host: {get_input: neutron_api_network}
1266 neutron::server::auth_uri: {get_input: keystone_auth_uri}
1267 neutron::server::auth_url: {get_input: keystone_identity_uri}
1268 neutron::server::database_connection: {get_input: neutron_dsn}
1269 neutron::server::api_workers: {get_input: neutron_workers}
1270 neutron::network_device_mtu: {get_input: neutron_tenant_mtu}
1271 neutron::agents::ml2::ovs::enable_tunneling: {get_input: neutron_enable_tunneling}
1272 neutron::agents::ml2::ovs::l2_population: {get_input: neutron_enable_l2pop}
1273 neutron::agents::ml2::ovs::local_ip: {get_input: neutron_local_ip}
1274 neutron::plugins::ml2::flat_networks: {get_input: neutron_flat_networks}
1275 neutron::agents::metadata::metadata_ip: {get_input: neutron_api_network}
1276 neutron_agent_mode: {get_input: neutron_agent_mode}
1277 neutron_router_distributed: {get_input: neutron_router_distributed}
1278 neutron::core_plugin: {get_input: neutron_core_plugin}
1279 neutron::service_plugins: {get_input: neutron_service_plugins}
1280 neutron::enable_ovs_agent: {get_input: neutron_enable_ovs_agent}
1281 neutron::plugins::ml2::type_drivers: {get_input: neutron_type_drivers}
1282 neutron::plugins::ml2::mechanism_drivers: {get_input: neutron_mechanism_drivers}
1283 neutron::plugins::ml2::extension_drivers: {get_input: neutron_plugin_extensions}
1284 neutron::server::allow_automatic_l3agent_failover: {get_input: neutron_allow_l3agent_failover}
1285 neutron::server::l3_ha: {get_input: neutron_l3_ha}
1286 neutron::plugins::ml2::network_vlan_ranges: {get_input: neutron_network_vlan_ranges}
1287 neutron::plugins::ml2::tunnel_id_ranges: {get_input: neutron_tunnel_id_ranges}
1288 neutron::plugins::ml2::vni_ranges: {get_input: neutron_vni_ranges}
1289 neutron::agents::ml2::ovs::bridge_mappings: {get_input: neutron_bridge_mappings}
1290 neutron_public_interface: {get_input: neutron_public_interface}
1291 neutron_public_interface_raw_device: {get_input: neutron_public_interface_raw_device}
1292 neutron_public_interface_default_route: {get_input: neutron_public_interface_default_route}
1293 neutron_public_interface_tag: {get_input: neutron_public_interface_tag}
1294 neutron::plugins::ml2::tenant_network_types: {get_input: neutron_tenant_network_types}
1295 neutron::agents::ml2::ovs::tunnel_types: {get_input: neutron_tunnel_types}
1296 neutron::agents::ml2::ovs::extensions: {get_input: neutron_agent_extensions}
1297 neutron::server::password: {get_input: neutron_password}
1298 neutron_dsn: {get_input: neutron_dsn}
1299 neutron::db::mysql::password: {get_input: neutron_password}
1300 neutron::keystone::auth::public_url: {get_input: neutron_public_url }
1301 neutron::keystone::auth::internal_url: {get_input: neutron_internal_url }
1302 neutron::keystone::auth::admin_url: {get_input: neutron_admin_url }
1303 neutron::keystone::auth::password: {get_input: neutron_password }
1304 neutron::keystone::auth::region: {get_input: keystone_region}
1305 neutron::server::notifications::auth_url: {get_input: neutron_auth_url}
1306 neutron::server::notifications::tenant_name: 'service'
1307 neutron::server::notifications::project_name: 'service'
1308 neutron::server::notifications::password: {get_input: nova_password}
1311 ceilometer_backend: {get_input: ceilometer_backend}
1312 ceilometer_mysql_conn_string: {get_input: ceilometer_dsn}
1313 ceilometer::telemetry_secret: {get_input: ceilometer_metering_secret}
1314 ceilometer::rabbit_userid: {get_input: rabbit_username}
1315 ceilometer::rabbit_password: {get_input: rabbit_password}
1316 ceilometer::rabbit_use_ssl: {get_input: rabbit_client_use_ssl}
1317 ceilometer::rabbit_port: {get_input: rabbit_client_port}
1318 ceilometer::debug: {get_input: debug}
1319 ceilometer::api::host: {get_input: ceilometer_api_network}
1320 ceilometer::api::keystone_password: {get_input: ceilometer_password}
1321 ceilometer::api::auth_uri: {get_input: keystone_auth_uri}
1322 ceilometer::api::identity_uri: {get_input: keystone_identity_uri}
1323 ceilometer::agent::auth::auth_password: {get_input: ceilometer_password}
1324 ceilometer::agent::auth::auth_url: {get_input: keystone_auth_uri}
1325 ceilometer::agent::central::coordination_url: {get_input: ceilometer_coordination_url}
1326 ceilometer::agent::notification::store_events: {get_input: ceilometer_store_events}
1327 ceilometer::db::mysql::password: {get_input: ceilometer_password}
1328 ceilometer::collector::meter_dispatcher: {get_input: ceilometer_meter_dispatcher}
1329 ceilometer::dispatcher::gnocchi::url: {get_input: gnocchi_internal_url }
1330 ceilometer::dispatcher::gnocchi::filter_project: 'service'
1331 ceilometer::dispatcher::gnocchi::archive_policy: 'low'
1332 ceilometer::dispatcher::gnocchi::resources_definition_file: 'gnocchi_resources.yaml'
1333 ceilometer::keystone::auth::public_url: {get_input: ceilometer_public_url }
1334 ceilometer::keystone::auth::internal_url: {get_input: ceilometer_internal_url }
1335 ceilometer::keystone::auth::admin_url: {get_input: ceilometer_admin_url }
1336 ceilometer::keystone::auth::password: {get_input: ceilometer_password }
1337 ceilometer::keystone::auth::region: {get_input: keystone_region}
1338 snmpd_readonly_user_name: {get_input: snmpd_readonly_user_name}
1339 snmpd_readonly_user_password: {get_input: snmpd_readonly_user_password}
1342 aodh::rabbit_userid: {get_input: rabbit_username}
1343 aodh::rabbit_password: {get_input: rabbit_password}
1344 aodh::rabbit_use_ssl: {get_input: rabbit_client_use_ssl}
1345 aodh::rabbit_port: {get_input: rabbit_client_port}
1346 aodh::debug: {get_input: debug}
1347 aodh::wsgi::apache::ssl: false
1348 aodh::wsgi::apache::bind_host: {get_input: aodh_api_network}
1349 aodh::api::service_name: 'httpd'
1350 aodh::api::host: {get_input: aodh_api_network}
1351 aodh::api::keystone_password: {get_input: aodh_password}
1352 aodh::api::keystone_auth_uri: {get_input: keystone_auth_uri}
1353 aodh::api::keystone_identity_uri: {get_input: keystone_identity_uri}
1354 aodh::auth::auth_password: {get_input: aodh_password}
1355 aodh::db::mysql::password: {get_input: aodh_password}
1356 # for a migration path from ceilometer-alarm to aodh, we use the same database & coordination
1357 aodh::evaluator::coordination_url: {get_input: ceilometer_coordination_url}
1358 aodh::keystone::auth::public_url: {get_input: aodh_public_url }
1359 aodh::keystone::auth::internal_url: {get_input: aodh_internal_url }
1360 aodh::keystone::auth::admin_url: {get_input: aodh_admin_url }
1361 aodh::keystone::auth::password: {get_input: aodh_password }
1362 aodh::keystone::auth::region: {get_input: keystone_region}
1365 gnocchi_backend: {get_input: gnocchi_backend}
1366 gnocchi_indexer_backend: {get_input: gnocchi_indexer_backend}
1367 gnocchi_mysql_conn_string: {get_input: gnocchi_dsn}
1368 gnocchi::debug: {get_input: debug}
1369 gnocchi::wsgi::apache::ssl: false
1370 gnocchi::wsgi::apache::bind_host: {get_input: gnocchi_api_network}
1371 gnocchi::api::service_name: 'httpd'
1372 gnocchi::api::host: {get_input: gnocchi_api_network}
1373 gnocchi::api::keystone_password: {get_input: gnocchi_password}
1374 gnocchi::api::keystone_auth_uri: {get_input: keystone_auth_uri}
1375 gnocchi::api::keystone_identity_uri: {get_input: keystone_identity_uri}
1376 gnocchi::db::mysql::password: {get_input: gnocchi_password}
1377 gnocchi::storage::swift::swift_authurl: {get_input: keystone_auth_uri}
1378 gnocchi::storage::swift::swift_key: {get_input: gnocchi_password}
1379 gnocchi::keystone::auth::public_url: {get_input: gnocchi_public_url }
1380 gnocchi::keystone::auth::internal_url: {get_input: gnocchi_internal_url }
1381 gnocchi::keystone::auth::admin_url: {get_input: gnocchi_admin_url }
1382 gnocchi::keystone::auth::password: {get_input: gnocchi_password }
1383 gnocchi::keystone::auth::region: {get_input: keystone_region}
1386 nova::rabbit_userid: {get_input: rabbit_username}
1387 nova::rabbit_password: {get_input: rabbit_password}
1388 nova::rabbit_use_ssl: {get_input: rabbit_client_use_ssl}
1389 nova::rabbit_port: {get_input: rabbit_client_port}
1390 nova::upgrade_level_compute: {get_input: upgrade_level_nova_compute}
1391 nova::debug: {get_input: debug}
1392 nova::use_ipv6: {get_input: nova_ipv6}
1393 nova::api::auth_uri: {get_input: keystone_auth_uri}
1394 nova::api::identity_uri: {get_input: keystone_identity_uri}
1395 nova::api::api_bind_address: {get_input: nova_api_network}
1396 nova::api::metadata_listen: {get_input: nova_metadata_network}
1397 nova::api::admin_password: {get_input: nova_password}
1398 nova::api::osapi_compute_workers: {get_input: nova_workers}
1399 nova::api::metadata_workers: {get_input: nova_workers}
1400 nova::compute::network_device_mtu: {get_input: neutron_tenant_mtu}
1401 nova::database_connection: {get_input: nova_dsn}
1402 nova::api_database_connection: {get_input: nova_api_dsn}
1403 nova::glance_api_servers: {get_input: glance_api_servers}
1404 nova::api::neutron_metadata_proxy_shared_secret: {get_input: neutron_metadata_proxy_shared_secret}
1405 nova::api::instance_name_template: {get_input: instance_name_template}
1406 nova::network::neutron::neutron_password: {get_input: neutron_password}
1407 nova::network::neutron::neutron_url: {get_input: neutron_internal_url}
1408 nova::network::neutron::neutron_auth_url: {get_input: neutron_auth_url}
1409 nova::vncproxy::host: {get_input: nova_api_network}
1410 nova::db::mysql::password: {get_input: nova_password}
1411 nova::db::mysql_api::password: {get_input: nova_password}
1412 nova_enable_db_purge: {get_input: nova_enable_db_purge}
1413 nova::keystone::auth::public_url: {get_input: nova_public_url}
1414 nova::keystone::auth::internal_url: {get_input: nova_internal_url}
1415 nova::keystone::auth::admin_url: {get_input: nova_admin_url}
1416 nova::keystone::auth::password: {get_input: nova_password }
1417 nova::keystone::auth::region: {get_input: keystone_region}
1420 apache::mod::remoteip::proxy_ips: {get_input: horizon_subnet}
1421 apache::ip: {get_input: horizon_network}
1422 horizon::allowed_hosts: {get_input: horizon_allowed_hosts}
1423 horizon::django_debug: {get_input: debug}
1424 horizon::secret_key: {get_input: horizon_secret}
1425 horizon::bind_address: {get_input: horizon_network}
1426 horizon::keystone_url: {get_input: keystone_auth_uri}
1429 sahara::host: {get_input: sahara_api_network}
1437 sahara::admin_password: {get_input: sahara_password}
1438 sahara::auth_uri: {get_input: keystone_auth_uri}
1439 sahara::admin_user: sahara
1440 sahara::identity_uri: {get_input: keystone_identity_uri}
1441 sahara::use_neutron: true
1442 sahara::database_connection: {get_input: sahara_dsn}
1443 sahara::debug: {get_input: debug}
1444 sahara::rpc_backend: rabbit
1445 sahara::rabbit_userid: {get_input: rabbit_username}
1446 sahara::rabbit_password: {get_input: rabbit_password}
1447 sahara::rabbit_use_ssl: {get_input: rabbit_client_use_ssl}
1448 sahara::rabbit_port: {get_input: rabbit_client_port}
1449 sahara::db::mysql::password: {get_input: sahara_password}
1450 sahara::keystone::auth::public_url: {get_input: sahara_public_url }
1451 sahara::keystone::auth::internal_url: {get_input: sahara_internal_url }
1452 sahara::keystone::auth::admin_url: {get_input: sahara_admin_url }
1453 sahara::keystone::auth::password: {get_input: sahara_password }
1454 sahara::keystone::auth::region: {get_input: keystone_region}
1456 rabbitmq::node_ip_address: {get_input: rabbitmq_network}
1457 rabbitmq::erlang_cookie: {get_input: rabbit_cookie}
1459 redis::bind: {get_input: redis_network}
1460 redis::requirepass: {get_input: redis_password}
1461 redis::masterauth: {get_input: redis_password}
1462 redis::sentinel_auth_pass: {get_input: redis_password}
1463 redis_vip: {get_input: redis_vip}
1465 tripleo::firewall::manage_firewall: {get_input: manage_firewall}
1466 tripleo::firewall::purge_firewall_rules: {get_input: purge_firewall_rules}
1468 memcached_ipv6: {get_input: memcached_ipv6}
1469 memcached::listen_ip: {get_input: memcached_network}
1470 neutron_public_interface_ip: {get_input: neutron_public_interface_ip}
1471 ntp::servers: {get_input: ntp_servers}
1472 timezone::timezone: {get_input: timezone}
1473 control_virtual_interface: {get_input: control_virtual_interface}
1474 public_virtual_interface: {get_input: public_virtual_interface}
1475 tripleo::keepalived::control_virtual_interface: {get_input: control_virtual_interface}
1476 tripleo::keepalived::public_virtual_interface: {get_input: public_virtual_interface}
1477 tripleo::haproxy::control_virtual_interface: {get_input: control_virtual_interface}
1478 tripleo::haproxy::public_virtual_interface: {get_input: public_virtual_interface}
1479 tripleo::haproxy::haproxy_log_address: {get_input: haproxy_log_address}
1480 tripleo::haproxy::service_certificate: {get_attr: [NodeTLSData, deployed_ssl_certificate_path]}
1481 tripleo::haproxy::haproxy_stats_user: {get_input: haproxy_stats_user}
1482 tripleo::haproxy::haproxy_stats_password: {get_input: haproxy_stats_password}
1483 tripleo::haproxy::redis_password: {get_input: redis_password}
1484 tripleo::packages::enable_install: {get_input: enable_package_install}
1485 tripleo::packages::enable_upgrade: {get_input: enable_package_upgrade}
1487 # Hook for site-specific additional pre-deployment config, e.g extra hieradata
1488 ControllerExtraConfigPre:
1489 depends_on: ControllerDeployment
1490 type: OS::TripleO::ControllerExtraConfigPre
1492 server: {get_resource: Controller}
1494 # Hook for site-specific additional pre-deployment config,
1495 # applying to all nodes, e.g node registration/unregistration
1497 depends_on: [ControllerExtraConfigPre, NodeTLSData]
1498 type: OS::TripleO::NodeExtraConfig
1500 server: {get_resource: Controller}
1503 type: OS::TripleO::Tasks::PackageUpdate
1506 type: OS::Heat::SoftwareDeployment
1508 name: UpdateDeployment
1509 config: {get_resource: UpdateConfig}
1510 server: {get_resource: Controller}
1513 get_param: UpdateIdentifier
1517 description: IP address of the server in the ctlplane network
1518 value: {get_attr: [Controller, networks, ctlplane, 0]}
1519 external_ip_address:
1520 description: IP address of the server in the external network
1521 value: {get_attr: [ExternalPort, ip_address]}
1522 internal_api_ip_address:
1523 description: IP address of the server in the internal_api network
1524 value: {get_attr: [InternalApiPort, ip_address]}
1526 description: IP address of the server in the storage network
1527 value: {get_attr: [StoragePort, ip_address]}
1528 storage_mgmt_ip_address:
1529 description: IP address of the server in the storage_mgmt network
1530 value: {get_attr: [StorageMgmtPort, ip_address]}
1532 description: IP address of the server in the tenant network
1533 value: {get_attr: [TenantPort, ip_address]}
1534 management_ip_address:
1535 description: IP address of the server in the management network
1536 value: {get_attr: [ManagementPort, ip_address]}
1538 description: Hostname of the server
1539 value: {get_attr: [Controller, name]}
1542 Server's IP address and hostname in the /etc/hosts format
1546 PRIMARYIP PRIMARYHOST.DOMAIN PRIMARYHOST
1547 EXTERNALIP EXTERNALHOST.DOMAIN EXTERNALHOST
1548 INTERNAL_APIIP INTERNAL_APIHOST.DOMAIN INTERNAL_APIHOST
1549 STORAGEIP STORAGEHOST.DOMAIN STORAGEHOST
1550 STORAGE_MGMTIP STORAGE_MGMTHOST.DOMAIN STORAGE_MGMTHOST
1551 TENANTIP TENANTHOST.DOMAIN TENANTHOST
1552 MANAGEMENTIP MANAGEMENTHOST.DOMAIN MANAGEMENTHOST
1554 PRIMARYIP: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, ControllerHostnameResolveNetwork]}]}
1555 DOMAIN: {get_param: CloudDomain}
1556 PRIMARYHOST: {get_attr: [Controller, name]}
1557 EXTERNALIP: {get_attr: [ExternalPort, ip_address]}
1561 - - {get_attr: [Controller, name]}
1563 INTERNAL_APIIP: {get_attr: [InternalApiPort, ip_address]}
1567 - - {get_attr: [Controller, name]}
1569 STORAGEIP: {get_attr: [StoragePort, ip_address]}
1573 - - {get_attr: [Controller, name]}
1575 STORAGE_MGMTIP: {get_attr: [StorageMgmtPort, ip_address]}
1579 - - {get_attr: [Controller, name]}
1581 TENANTIP: {get_attr: [TenantPort, ip_address]}
1585 - - {get_attr: [Controller, name]}
1587 MANAGEMENTIP: {get_attr: [ManagementPort, ip_address]}
1591 - - {get_attr: [Controller, name]}
1593 nova_server_resource:
1594 description: Heat resource handle for the Nova compute server
1596 {get_resource: Controller}
1598 description: Swift device formatted for swift-ring-builder
1601 template: 'r1z1-IP:%PORT%/d1'
1603 IP: {get_attr: [NetIpMap, net_ip_uri_map, {get_param: [ServiceNetMap, SwiftMgmtNetwork]}]}
1604 swift_proxy_memcache:
1605 description: Swift proxy-memcache value
1608 template: "IP:11211"
1610 IP: {get_attr: [NetIpMap, net_ip_uri_map, {get_param: [ServiceNetMap, MemcachedNetwork]}]}
1612 description: identifier which changes if the controller configuration may need re-applying
1616 - - {get_attr: [ControllerDeployment, deploy_stdout]}
1617 - {get_attr: [NodeTLSCAData, deploy_stdout]}
1618 - {get_attr: [NodeTLSData, deploy_stdout]}
1619 - {get_attr: [ControllerExtraConfigPre, deploy_stdout]}
1620 - {get_param: UpdateIdentifier}
1621 tls_key_modulus_md5:
1622 description: MD5 checksum of the TLS Key Modulus
1623 value: {get_attr: [NodeTLSData, key_modulus_md5]}
1624 tls_cert_modulus_md5:
1625 description: MD5 checksum of the TLS Certificate Modulus
1626 value: {get_attr: [NodeTLSData, cert_modulus_md5]}