1 heat_template_version: 2016-04-08
4 OpenStack controller node configured by Puppet.
8 description: The password for the keystone admin account, used for monitoring, querying neutron etc.
15 description: The password for the aodh services.
18 CeilometerApiVirtualIP:
23 description: The ceilometer backend type.
25 CeilometerMeteringSecret:
26 description: Secret shared by the ceilometer services.
30 description: The password for the ceilometer service and db account.
33 CeilometerStoreEvents:
35 description: Whether to store events in ceilometer.
37 CeilometerMeterDispatcher:
39 description: Dispatcher to process meter data
42 - allowed_values: ['gnocchi', 'database']
48 description: Number of workers for Ceilometer service.
53 Whether to create cron job for purging soft deleted rows in Cinder database.
55 CinderEnableNfsBackend:
57 description: Whether to enable or not the NFS backend for Cinder
59 CinderEnableIscsiBackend:
61 description: Whether to enable or not the Iscsi backend for Cinder
63 CinderEnableRbdBackend:
65 description: Whether to enable or not the Rbd backend for Cinder
69 description: The iSCSI helper to use with cinder.
71 CinderLVMLoopDeviceSize:
73 description: The size of the loopback file used by the cinder LVM driver.
75 CinderNfsMountOptions:
78 Mount options for NFS mounts used by Cinder NFS backend. Effective
79 when CinderEnableNfsBackend is true.
84 NFS servers used by Cinder NFS backend. Effective when
85 CinderEnableNfsBackend is true.
86 type: comma_delimited_list
88 description: The password for the cinder service and db account, used by cinder-api.
93 description: Contains parameters to configure Cinder backends. Typically
94 set via parameter_defaults in the resource registry.
98 description: Number of workers for Cinder service.
100 controllerExtraConfig:
103 Deprecated. Use ControllerExtraConfig via parameter_defaults instead.
105 ControllerExtraConfig:
108 Controller specific hiera configuration data to inject into the cluster.
113 A network mapped list of IPs to assign to Controllers in the following form:
115 "internal_api": ["a.b.c.d", "e.f.g.h"],
119 ControlVirtualInterface:
121 description: Interface where virtual ip will be assigned.
125 description: Enable IPv6 in Corosync
129 description: Set to True to enable debugging on all services.
133 description: Whether to enable fencing in Pacemaker or not.
137 description: Whether to use Galera instead of regular MariaDB.
141 description: Whether to deploy a LoadBalancer on the Controller
145 description: Whether to deploy Ceph Storage (OSD) on the Controller
149 description: Whether to enable Swift Storage on the Controller
154 Additional hieradata to inject into the cluster, note that
155 ControllerExtraConfig takes precedence over ExtraConfig.
160 Pacemaker fencing configuration. The JSON should have
161 the following structure:
165 "agent": "AGENT_NAME",
166 "host_mac": "HOST_MAC_ADDRESS",
167 "params": {"PARAM_NAME": "PARAM_VALUE"}
175 "agent": "fence_xvm",
176 "host_mac": "52:54:00:aa:bb:cc",
178 "multicast_address": "225.0.0.12",
179 "port": "baremetal_0",
181 "manage_key_file": true,
182 "key_file": "/etc/fence_xvm.key",
183 "key_file_password": "abcdef"
190 description: Flavor for control nodes to request when deploying.
193 - custom_constraint: nova.flavor
196 description: The short name of the Gnocchi backend to use. Should be one
197 of swift, rbd, or file
200 - allowed_values: ['swift', 'file', 'rbd']
201 GnocchiIndexerBackend:
203 description: The short name of the Gnocchi indexer backend to use.
209 description: The password for the gnocchi service and db account.
212 HAProxyStatsPassword:
213 description: Password for HAProxy stats endpoint
216 description: User for HAProxy stats endpoint
219 HAProxySyslogAddress:
221 description: Syslog address where HAproxy will send its log
223 HeatAuthEncryptionKey:
224 description: Auth encryption key for heat-engine
229 description: A list of IP/Hostname allowed to connect to horizon
230 type: comma_delimited_list
232 description: Secret key for Django
237 default: overcloud-control
239 - custom_constraint: glance.image
241 default: 'REBUILD_PRESERVE_EPHEMERAL'
242 description: What policy to use when reconstructing instances. REBUILD for rebuilds, REBUILD_PRESERVE_EPHEMERAL to preserve /mnt.
244 InstanceNameTemplate:
245 default: 'instance-%08x'
246 description: Template string to be used to generate instance names
250 description: Name of an existing Nova key pair to enable SSH access to the instances
253 - custom_constraint: nova.keypair
257 description: Keystone region for endpoint
260 description: Whether to manage IPtables rules.
264 description: Enable IPv6 features in Memcached.
268 description: Whether IPtables rules should be purged before setting up the new ones.
273 MysqlClusterUniquePart:
274 description: A unique identifier of the MySQL cluster the controller is in.
276 default: 'unset' # Has to be here because of the ignored empty value bug
277 # Drop the validation: https://bugs.launchpad.net/tripleo/+bug/1405446
279 # - length: {min: 4, max: 10}
280 MysqlInnodbBufferPoolSize:
282 Specifies the size of the buffer pool in megabytes. Setting to
283 zero should be interpreted as "no value" and will defer to the
288 description: Configures MySQL max_connections config setting
291 MysqlClustercheckPassword:
297 default: '' # Has to be here because of the ignored empty value bug
298 NeutronBridgeMappings:
300 The OVS logical->physical bridge mappings to use. See the Neutron
301 documentation for details. Defaults to mapping br-ex - the external
302 bridge on hosts - to a physical name 'datacentre' which can be used
303 to create provider networks (and we use this for the default floating
304 network) - if changing this either use different post-install network
305 scripts or be sure to keep 'datacentre' as a mapping network name.
306 type: comma_delimited_list
307 default: "datacentre:br-ex"
308 NeutronEnableOVSAgent:
309 description: Knob to enable/disable OVS Agent
314 description: Agent mode for the neutron-l3-agent on the controller hosts
318 description: Whether to enable l3-agent HA
322 description: Whether to configure Neutron Distributed Virtual Routers
324 NeutronMetadataProxySharedSecret:
325 description: Shared secret to prevent spoofing
331 The core plugin for Neutron. The value should be the entrypoint to be loaded
332 from neutron.core_plugins namespace.
334 NeutronServicePlugins:
335 default: "router,qos"
337 Comma-separated list of service plugin entrypoints to be loaded from the
338 neutron.service_plugins namespace.
339 type: comma_delimited_list
341 default: "vxlan,vlan,flat,gre"
343 Comma-separated list of network type driver entrypoints to be loaded.
344 type: comma_delimited_list
345 NeutronMechanismDrivers:
346 default: 'openvswitch'
348 The mechanism drivers for the Neutron tenant network.
349 type: comma_delimited_list
350 NeutronAllowL3AgentFailover:
352 description: Allow automatic l3-agent failover
354 NeutronEnableTunnelling:
360 Enable/disable the L2 population feature in the Neutron agents.
363 type: comma_delimited_list
364 default: 'datacentre'
365 description: If set, flat networks to configure in neutron plugins.
368 description: Whether to enable l3-agent HA
372 description: The tenant network type for Neutron.
373 type: comma_delimited_list
374 NeutronNetworkVLANRanges:
375 default: 'datacentre:1:1000'
377 The Neutron ML2 and OpenVSwitch vlan mapping range to support. See the
378 Neutron documentation for permitted values. Defaults to permitting any
379 VLAN on the 'datacentre' physical network (See NeutronBridgeMappings).
380 type: comma_delimited_list
382 description: The password for the neutron service and db account, used by neutron agents.
385 NeutronPublicInterface:
387 description: What interface to bridge onto br-ex for network nodes.
389 NeutronPublicInterfaceTag:
392 VLAN tag for creating a public VLAN. The tag will be used to
393 create an access port on the exterior bridge for each control plane node,
394 and that port will be given the IP address returned by neutron from the
395 public network. Set CONTROLEXTRA=overcloud-vlan-port.yaml when compiling
396 overcloud.yaml to include the deployment of VLAN ports to the control
399 NeutronPublicInterfaceDefaultRoute:
401 description: A custom default route for the NeutronPublicInterface.
403 NeutronPublicInterfaceIP:
405 description: A custom IP address to put onto the NeutronPublicInterface.
407 NeutronPublicInterfaceRawDevice:
409 description: If set, the public interface is a vlan with this device as the raw device.
413 The default MTU for tenant networks. For VXLAN/GRE tunneling, this should
414 be at least 50 bytes smaller than the MTU on the physical network. This
415 value will be used to set the MTU on the virtual Ethernet device.
416 This number is related to the value of NeutronDnsmasqOptions, since that
417 will determine the MTU that is assigned to the VM host through DHCP.
423 The tunnel types for the Neutron tenant network.
424 type: comma_delimited_list
425 NeutronTunnelIdRanges:
427 Comma-separated list of <tun_min>:<tun_max> tuples enumerating ranges
428 of GRE tunnel IDs that are available for tenant network allocation
429 default: ["1:4094", ]
430 type: comma_delimited_list
433 Comma-separated list of <vni_min>:<vni_max> tuples enumerating ranges
434 of VXLAN VNI IDs that are available for tenant network allocation
435 default: ["1:4094", ]
436 type: comma_delimited_list
437 NeutronPluginExtensions:
438 default: "qos,port_security"
440 Comma-separated list of extensions enabled for the Neutron plugin.
441 type: comma_delimited_list
442 NeutronAgentExtensions:
445 Comma-separated list of extensions enabled for the Neutron agents.
446 type: comma_delimited_list
452 description: Number of workers for Neutron service.
457 Whether to create cron job for purging soft deleted rows in Nova database.
461 description: Enable IPv6 features in Nova
464 description: The password for the nova service and db account, used by nova-api.
469 description: Number of workers for Nova service.
473 description: Should MongoDb journaling be disabled
477 description: Enable IPv6 if Mongo DB VIP is IPv6
481 description: Comma-separated list of ntp servers
482 type: comma_delimited_list
485 description: The password for the 'pcsd' user.
487 PublicVirtualInterface:
490 Specifies the interface where the public-facing virtual ip will be assigned.
491 This should be int_public when a VLAN is being used.
495 default: '' # Has to be here because of the ignored empty value bug
498 default: '' # Has to be here because of the ignored empty value bug
501 description: The password for RabbitMQ
506 description: The username for RabbitMQ
511 Rabbit client subscriber parameter to specify
512 an SSL connection to the RabbitMQ host.
516 description: Set rabbit subscriber port, change this if using SSL
520 description: The password to access the Redis service
524 default: '' # Has to be here because of the ignored empty value bug
527 default: '' # Has to be here because of the ignored empty value bug
528 description: An IP address which is wrapped in brackets in case of IPv6
529 SnmpdReadonlyUserName:
530 default: ro_snmp_user
531 description: The user name for SNMPd with readonly rights running on all Overcloud nodes
533 SnmpdReadonlyUserPassword:
534 description: The user password for SNMPd with readonly rights running on all Overcloud nodes
538 description: A random string to be used as a salt when hashing to determine mappings
544 description: Value of mount_check in Swift account/container/object -server.conf
549 description: The minimum time (in hours) before a partition in a ring can be moved following a rebalance.
552 description: Partition Power to use when building Swift rings
556 description: Whether to manage Swift rings or not
564 description: How many replicas to use in the swift rings.
567 description: The timezone to be set on controller nodes.
569 UpgradeLevelNovaCompute:
571 description: Nova Compute upgrade level
573 VirtualIP: # DEPRECATED: use per service settings instead
575 default: '' # Has to be here because of the ignored empty value bug
588 EnablePackageInstall:
590 description: Set to true to enable package installation via Puppet
594 description: Mapping of service_name -> network name. Typically set
595 via parameter_defaults in the resource registry.
599 description: Mapping of service endpoint -> protocol. Typically set
600 via parameter_defaults in the resource registry.
606 Setting to a previously unused value during stack-update will trigger
607 package update on all nodes
610 default: '' # Defaults to Heat created hostname
614 description: Optional mapping to override hostnames
615 NetworkDeploymentActions:
616 type: comma_delimited_list
618 Heat action when to apply network configuration changes
623 SoftwareConfigTransport:
624 default: POLL_SERVER_CFN
626 How the server should receive the metadata required for software configuration.
629 - allowed_values: [POLL_SERVER_CFN, POLL_SERVER_HEAT, POLL_TEMP_URL, ZAQAR_MESSAGE]
634 The DNS domain used for the hosts. This should match the dhcp_domain
635 configured in the Undercloud neutron. Defaults to localdomain.
639 Extra properties or metadata passed to Nova for the created nodes in
640 the overcloud. It's accessible via the Nova metadata API.
644 description: Optional scheduler hints to pass to nova
646 ServiceConfigSettings:
652 description: Do not use deprecated params, they will be removed.
654 - controllerExtraConfig
659 type: OS::Nova::Server
661 image: {get_param: Image}
662 image_update_policy: {get_param: ImageUpdatePolicy}
663 flavor: {get_param: Flavor}
664 key_name: {get_param: KeyName}
667 user_data_format: SOFTWARE_CONFIG
668 user_data: {get_resource: UserData}
671 template: {get_param: Hostname}
672 params: {get_param: HostnameMap}
673 software_config_transport: {get_param: SoftwareConfigTransport}
674 metadata: {get_param: ServerMetadata}
675 scheduler_hints: {get_param: SchedulerHints}
677 # Combine the NodeAdminUserData and NodeUserData mime archives
679 type: OS::Heat::MultipartMime
682 - config: {get_resource: NodeAdminUserData}
684 - config: {get_resource: NodeUserData}
687 # Creates the "heat-admin" user if configured via the environment
688 # Should return a OS::Heat::MultipartMime reference via OS::stack_id
690 type: OS::TripleO::NodeAdminUserData
692 # For optional operator additional userdata
693 # Should return a OS::Heat::MultipartMime reference via OS::stack_id
695 type: OS::TripleO::NodeUserData
698 type: OS::TripleO::Controller::Ports::ExternalPort
700 IPPool: {get_param: ControllerIPs}
701 NodeIndex: {get_param: NodeIndex}
702 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
705 type: OS::TripleO::Controller::Ports::InternalApiPort
707 IPPool: {get_param: ControllerIPs}
708 NodeIndex: {get_param: NodeIndex}
709 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
712 type: OS::TripleO::Controller::Ports::StoragePort
714 IPPool: {get_param: ControllerIPs}
715 NodeIndex: {get_param: NodeIndex}
716 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
719 type: OS::TripleO::Controller::Ports::StorageMgmtPort
721 IPPool: {get_param: ControllerIPs}
722 NodeIndex: {get_param: NodeIndex}
723 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
726 type: OS::TripleO::Controller::Ports::TenantPort
728 IPPool: {get_param: ControllerIPs}
729 NodeIndex: {get_param: NodeIndex}
730 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
733 type: OS::TripleO::Controller::Ports::ManagementPort
735 IPPool: {get_param: ControllerIPs}
736 NodeIndex: {get_param: NodeIndex}
737 ControlPlaneIP: {get_attr: [Controller, networks, ctlplane, 0]}
740 type: OS::TripleO::Network::Ports::NetIpMap
742 ControlPlaneIp: {get_attr: [Controller, networks, ctlplane, 0]}
743 ExternalIp: {get_attr: [ExternalPort, ip_address]}
744 ExternalIpSubnet: {get_attr: [ExternalPort, ip_subnet]}
745 ExternalIpUri: {get_attr: [ExternalPort, ip_address_uri]}
746 InternalApiIp: {get_attr: [InternalApiPort, ip_address]}
747 InternalApiIpSubnet: {get_attr: [InternalApiPort, ip_subnet]}
748 InternalApiIpUri: {get_attr: [InternalApiPort, ip_address_uri]}
749 StorageIp: {get_attr: [StoragePort, ip_address]}
750 StorageIpSubnet: {get_attr: [StoragePort, ip_subnet]}
751 StorageIpUri: {get_attr: [StoragePort, ip_address_uri]}
752 StorageMgmtIp: {get_attr: [StorageMgmtPort, ip_address]}
753 StorageMgmtIpSubnet: {get_attr: [StorageMgmtPort, ip_subnet]}
754 StorageMgmtIpUri: {get_attr: [StorageMgmtPort, ip_address_uri]}
755 TenantIp: {get_attr: [TenantPort, ip_address]}
756 TenantIpSubnet: {get_attr: [TenantPort, ip_subnet]}
757 TenantIpUri: {get_attr: [TenantPort, ip_address_uri]}
758 ManagementIp: {get_attr: [ManagementPort, ip_address]}
759 ManagementIpSubnet: {get_attr: [ManagementPort, ip_subnet]}
760 ManagementIpUri: {get_attr: [ManagementPort, ip_address_uri]}
763 type: OS::TripleO::Controller::Net::SoftwareConfig
765 ControlPlaneIp: {get_attr: [Controller, networks, ctlplane, 0]}
766 ExternalIpSubnet: {get_attr: [ExternalPort, ip_subnet]}
767 InternalApiIpSubnet: {get_attr: [InternalApiPort, ip_subnet]}
768 StorageIpSubnet: {get_attr: [StoragePort, ip_subnet]}
769 StorageMgmtIpSubnet: {get_attr: [StorageMgmtPort, ip_subnet]}
770 TenantIpSubnet: {get_attr: [TenantPort, ip_subnet]}
771 ManagementIpSubnet: {get_attr: [ManagementPort, ip_subnet]}
774 type: OS::TripleO::SoftwareDeployment
776 name: NetworkDeployment
777 config: {get_resource: NetworkConfig}
778 server: {get_resource: Controller}
779 actions: {get_param: NetworkDeploymentActions}
782 interface_name: {get_param: NeutronPublicInterface}
784 # Resource for site-specific injection of root certificate
786 depends_on: NetworkDeployment
787 type: OS::TripleO::NodeTLSCAData
789 server: {get_resource: Controller}
791 # Resource for site-specific passing of private keys/certificates
793 depends_on: NodeTLSCAData
794 type: OS::TripleO::NodeTLSData
796 server: {get_resource: Controller}
797 NodeIndex: {get_param: NodeIndex}
800 ControllerDeployment:
801 type: OS::TripleO::SoftwareDeployment
802 depends_on: NetworkDeployment
804 name: ControllerDeployment
805 config: {get_resource: ControllerConfig}
806 server: {get_resource: Controller}
808 bootstack_nodeid: {get_attr: [Controller, name]}
809 ceilometer_workers: {get_param: CeilometerWorkers}
810 cinder_workers: {get_param: CinderWorkers}
811 nova_workers: {get_param: NovaWorkers}
812 neutron_workers: {get_param: NeutronWorkers}
813 neutron_enable_tunneling: {get_param: NeutronEnableTunnelling}
814 neutron_enable_l2pop: {get_param: NeutronEnableL2Pop}
815 haproxy_log_address: {get_param: HAProxySyslogAddress}
816 haproxy_stats_password: {get_param: HAProxyStatsPassword}
817 haproxy_stats_user: {get_param: HAProxyStatsUser}
818 heat_auth_encryption_key: {get_param: HeatAuthEncryptionKey}
819 horizon_allowed_hosts: {get_param: HorizonAllowedHosts}
820 horizon_secret: {get_param: HorizonSecret}
821 admin_password: {get_param: AdminPassword}
822 neutron_public_interface_ip: {get_param: NeutronPublicInterfaceIP}
823 debug: {get_param: Debug}
824 cinder_enable_db_purge: {get_param: CinderEnableDBPurge}
825 cinder_enable_nfs_backend: {get_param: CinderEnableNfsBackend}
826 cinder_enable_rbd_backend: {get_param: CinderEnableRbdBackend}
827 cinder_nfs_mount_options: {get_param: CinderNfsMountOptions}
832 SERVERS: {get_param: CinderNfsServers}
833 cinder_lvm_loop_device_size: {get_param: CinderLVMLoopDeviceSize}
834 cinder_password: {get_param: CinderPassword}
835 cinder_enable_iscsi_backend: {get_param: CinderEnableIscsiBackend}
836 cinder_iscsi_helper: {get_param: CinderISCSIHelper}
837 cinder_backend_config: {get_param: CinderBackendConfig}
841 - - {get_param: [EndpointMap, MysqlInternal, protocol]}
843 - {get_param: CinderPassword}
845 - {get_param: [EndpointMap, MysqlInternal, host]}
847 cinder_public_url: {get_param: [EndpointMap, CinderPublic, uri]}
848 cinder_internal_url: {get_param: [EndpointMap, CinderInternal, uri]}
849 cinder_admin_url: {get_param: [EndpointMap, CinderAdmin, uri]}
850 cinder_public_url_v2: {get_param: [EndpointMap, CinderV2Public, uri]}
851 cinder_internal_url_v2: {get_param: [EndpointMap, CinderV2Internal, uri]}
852 cinder_admin_url_v2: {get_param: [EndpointMap, CinderV2Admin, uri]}
853 keystone_identity_uri: { get_param: [EndpointMap, KeystoneAdmin, uri_no_suffix] }
854 keystone_auth_uri: {get_param: [EndpointMap, KeystoneInternal, uri] }
855 keystone_ec2_uri: { get_param: [EndpointMap, KeystoneEC2, uri] }
856 enable_fencing: {get_param: EnableFencing}
857 enable_galera: {get_param: EnableGalera}
858 enable_load_balancer: {get_param: EnableLoadBalancer}
859 enable_ceph_storage: {get_param: EnableCephStorage}
860 enable_swift_storage: {get_param: EnableSwiftStorage}
861 manage_firewall: {get_param: ManageFirewall}
862 purge_firewall_rules: {get_param: PurgeFirewallRules}
863 mysql_innodb_buffer_pool_size: {get_param: MysqlInnodbBufferPoolSize}
864 mysql_max_connections: {get_param: MysqlMaxConnections}
865 mysql_root_password: {get_param: MysqlRootPassword}
866 mysql_clustercheck_password: {get_param: MysqlClustercheckPassword}
869 template: tripleo-CLUSTER
871 CLUSTER: {get_param: MysqlClusterUniquePart}
872 neutron_flat_networks:
876 NETWORKS: {get_param: NeutronFlatNetworks}
877 neutron_metadata_proxy_shared_secret: {get_param: NeutronMetadataProxySharedSecret}
878 neutron_agent_mode: {get_param: NeutronAgentMode}
879 neutron_router_distributed: {get_param: NeutronDVR}
880 neutron_core_plugin: {get_param: NeutronCorePlugin}
881 neutron_service_plugins:
885 PLUGINS: {get_param: NeutronServicePlugins}
886 neutron_type_drivers:
890 DRIVERS: {get_param: NeutronTypeDrivers}
891 neutron_enable_ovs_agent: {get_param: NeutronEnableOVSAgent}
892 neutron_mechanism_drivers:
896 MECHANISMS: {get_param: NeutronMechanismDrivers}
897 neutron_allow_l3agent_failover: {get_param: NeutronAllowL3AgentFailover}
898 neutron_l3_ha: {get_param: NeutronL3HA}
899 neutron_network_vlan_ranges:
903 RANGES: {get_param: NeutronNetworkVLANRanges}
904 neutron_bridge_mappings:
908 MAPPINGS: {get_param: NeutronBridgeMappings}
909 neutron_public_interface: {get_param: NeutronPublicInterface}
910 neutron_public_interface_raw_device: {get_param: NeutronPublicInterfaceRawDevice}
911 neutron_public_interface_default_route: {get_param: NeutronPublicInterfaceDefaultRoute}
912 neutron_public_interface_tag: {get_param: NeutronPublicInterfaceTag}
913 neutron_tunnel_id_ranges:
917 RANGES: {get_param: NeutronTunnelIdRanges}
922 RANGES: {get_param: NeutronVniRanges}
923 neutron_tenant_network_types:
927 TYPES: {get_param: NeutronNetworkType}
928 neutron_tunnel_types:
932 TYPES: {get_param: NeutronTunnelTypes}
933 neutron_plugin_extensions:
935 template: PLUGIN_EXTENSIONS
937 PLUGIN_EXTENSIONS: {get_param: NeutronPluginExtensions}
938 neutron_agent_extensions:
940 template: AGENT_EXTENSIONS
942 AGENT_EXTENSIONS: {get_param: NeutronAgentExtensions}
943 neutron_password: {get_param: NeutronPassword}
944 neutron_tenant_mtu: {get_param: NeutronTenantMtu}
948 - - {get_param: [EndpointMap, MysqlInternal, protocol]}
950 - {get_param: NeutronPassword}
952 - {get_param: [EndpointMap, MysqlInternal, host]}
953 - '/ovs_neutron?charset=utf8'
954 neutron_internal_url: { get_param: [ EndpointMap, NeutronInternal, uri ] }
955 neutron_public_url: { get_param: [ EndpointMap, NeutronPublic, uri ] }
956 neutron_admin_url: { get_param: [ EndpointMap, NeutronAdmin, uri ] }
957 neutron_auth_url: { get_param: [ EndpointMap, KeystoneV3Admin, uri ] }
958 nova_internal_url: { get_param: [ EndpointMap, NovaInternal, uri ] }
959 ceilometer_backend: {get_param: CeilometerBackend}
960 ceilometer_metering_secret: {get_param: CeilometerMeteringSecret}
961 ceilometer_password: {get_param: CeilometerPassword}
962 ceilometer_store_events: {get_param: CeilometerStoreEvents}
963 aodh_password: {get_param: AodhPassword}
964 aodh_internal_url: { get_param: [ EndpointMap, AodhInternal, uri ] }
965 aodh_public_url: { get_param: [ EndpointMap, AodhPublic, uri ] }
966 aodh_admin_url: { get_param: [ EndpointMap, AodhAdmin, uri ] }
967 ceilometer_meter_dispatcher: {get_param: CeilometerMeterDispatcher}
968 gnocchi_password: {get_param: GnocchiPassword}
969 gnocchi_backend: {get_param: GnocchiBackend}
970 gnocchi_indexer_backend: {get_param: GnocchiIndexerBackend}
971 ceilometer_coordination_url:
975 - {get_param: RedisPassword}
977 - {get_param: RedisVirtualIPUri}
982 - - {get_param: [EndpointMap, MysqlInternal, protocol]}
984 - {get_param: CeilometerPassword}
986 - {get_param: [EndpointMap, MysqlInternal, host]}
991 - - {get_param: [EndpointMap, MysqlInternal, protocol]}
993 - {get_param: GnocchiPassword}
995 - {get_param: [EndpointMap, MysqlInternal, host]}
997 gnocchi_internal_url: {get_param: [EndpointMap, GnocchiInternal, uri]}
998 gnocchi_public_url: { get_param: [ EndpointMap, GnocchiPublic, uri ] }
999 gnocchi_admin_url: { get_param: [ EndpointMap, GnocchiAdmin, uri ] }
1000 ceilometer_public_url: {get_param: [EndpointMap, CeilometerPublic, uri]}
1001 ceilometer_internal_url: {get_param: [EndpointMap, CeilometerInternal, uri]}
1002 ceilometer_admin_url: {get_param: [EndpointMap, CeilometerAdmin, uri]}
1003 snmpd_readonly_user_name: {get_param: SnmpdReadonlyUserName}
1004 snmpd_readonly_user_password: {get_param: SnmpdReadonlyUserPassword}
1005 nova_enable_db_purge: {get_param: NovaEnableDBPurge}
1006 nova_ipv6: {get_param: NovaIPv6}
1007 corosync_ipv6: {get_param: CorosyncIPv6}
1008 memcached_ipv6: {get_param: MemcachedIPv6}
1009 nova_password: {get_param: NovaPassword}
1013 - - {get_param: [EndpointMap, MysqlInternal, protocol]}
1015 - {get_param: NovaPassword}
1017 - {get_param: [EndpointMap, MysqlInternal, host]}
1022 - - {get_param: [EndpointMap, MysqlInternal, protocol]}
1024 - {get_param: NovaPassword}
1026 - {get_param: [EndpointMap, MysqlInternal, host]}
1028 upgrade_level_nova_compute: {get_param: UpgradeLevelNovaCompute}
1029 instance_name_template: {get_param: InstanceNameTemplate}
1030 nova_public_url: {get_param: [EndpointMap, NovaPublic, uri]}
1031 nova_internal_url: {get_param: [EndpointMap, NovaInternal, uri]}
1032 nova_admin_url: {get_param: [EndpointMap, NovaAdmin, uri]}
1033 fencing_config: {get_param: FencingConfig}
1034 pcsd_password: {get_param: PcsdPassword}
1035 rabbit_username: {get_param: RabbitUserName}
1036 rabbit_password: {get_param: RabbitPassword}
1037 rabbit_cookie: {get_param: RabbitCookie}
1038 rabbit_client_use_ssl: {get_param: RabbitClientUseSSL}
1039 rabbit_client_port: {get_param: RabbitClientPort}
1040 mongodb_no_journal: {get_param: MongoDbNoJournal}
1041 mongodb_ipv6: {get_param: MongoDbIPv6}
1042 ntp_servers: {get_param: NtpServer}
1043 timezone: {get_param: TimeZone}
1044 control_virtual_interface: {get_param: ControlVirtualInterface}
1045 public_virtual_interface: {get_param: PublicVirtualInterface}
1046 swift_hash_suffix: {get_param: SwiftHashSuffix}
1047 swift_part_power: {get_param: SwiftPartPower}
1048 swift_ring_build: {get_param: SwiftRingBuild}
1049 swift_replicas: {get_param: SwiftReplicas}
1050 swift_min_part_hours: {get_param: SwiftMinPartHours}
1051 swift_mount_check: {get_param: SwiftMountCheck}
1052 enable_package_install: {get_param: EnablePackageInstall}
1053 enable_package_upgrade: {get_attr: [UpdateDeployment, update_managed_packages]}
1054 swift_proxy_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, SwiftProxyNetwork]}]}
1055 swift_management_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, SwiftMgmtNetwork]}]}
1056 cinder_iscsi_network:
1060 IP: {get_attr: [NetIpMap, net_ip_uri_map, {get_param: [ServiceNetMap, CinderIscsiNetwork]}]}
1061 cinder_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, CinderApiNetwork]}]}
1062 glance_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, GlanceApiNetwork]}]}
1063 glance_registry_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, GlanceRegistryNetwork]}]}
1064 glance_api_servers: { get_param: [EndpointMap, GlanceInternal, uri]}
1065 heat_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, HeatApiNetwork]}]}
1066 keystone_public_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, KeystonePublicApiNetwork]}]}
1067 keystone_admin_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, KeystoneAdminApiNetwork]}]}
1068 keystone_region: {get_param: KeystoneRegion}
1069 mongo_db_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, MongoDbNetwork]}]}
1070 neutron_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, NeutronApiNetwork]}]}
1071 neutron_local_ip: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, NeutronTenantNetwork]}]}
1072 ceilometer_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, CeilometerApiNetwork]}]}
1073 aodh_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, AodhApiNetwork]}]}
1074 gnocchi_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, GnocchiApiNetwork]}]}
1075 nova_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, NovaApiNetwork]}]}
1076 nova_metadata_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, NovaMetadataNetwork]}]}
1077 horizon_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, HorizonNetwork]}]}
1080 template: "['SUBNET']"
1082 SUBNET: {get_attr: [NetIpMap, net_ip_subnet_map, {get_param: [ServiceNetMap, HorizonNetwork]}]}
1083 rabbitmq_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, RabbitMqNetwork]}]}
1084 redis_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, RedisNetwork]}]}
1085 redis_password: {get_param: RedisPassword}
1086 redis_vip: {get_param: RedisVirtualIP}
1087 sahara_api_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, SaharaApiNetwork]}]}
1088 memcached_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, MemcachedNetwork]}]}
1089 mysql_network: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, MysqlNetwork]}]}
1090 mysql_virtual_ip: {get_param: MysqlVirtualIP}
1091 ceph_cluster_network: {get_attr: [NetIpMap, net_ip_subnet_map, {get_param: [ServiceNetMap, CephClusterNetwork]}]}
1092 ceph_public_network: {get_attr: [NetIpMap, net_ip_subnet_map, {get_param: [ServiceNetMap, CephPublicNetwork]}]}
1093 ceph_public_ip: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, CephPublicNetwork]}]}
1095 # Map heat metadata into hiera datafiles
1097 type: OS::Heat::StructuredConfig
1099 group: os-apply-config
1104 - heat_config_%{::deploy_config_name}
1105 - controller_extraconfig
1111 - swift_devices_and_proxy # provided by SwiftDevicesAndProxyConfig
1112 - ceph_cluster # provided by CephClusterConfig
1114 - bootstrap_node # provided by BootstrapNodeConfig
1115 - all_nodes # provided by allNodesConfig
1116 - vip_data # provided by vip-config
1120 - cinder_dellsc_data # Optionally provided by ControllerExtraConfigPre
1121 - cinder_netapp_data # Optionally provided by ControllerExtraConfigPre
1122 - cinder_eqlx_data # Optionally provided by ControllerExtraConfigPre
1123 - neutron_bigswitch_data # Optionally provided by ControllerExtraConfigPre
1124 - neutron_cisco_data # Optionally provided by ControllerExtraConfigPre
1125 - cisco_n1kv_data # Optionally provided by ControllerExtraConfigPre
1126 - neutron_nuage_data # Optionally provided by ControllerExtraConfigPre
1127 - midonet_data #Optionally provided by AllNodesExtraConfig
1128 - neutron_opencontrail_data # Optionally provided by ControllerExtraConfigPre
1129 - neutron_plumgrid_data # Optionally provided by ControllerExtraConfigPre
1130 merge_behavior: deeper
1133 mapped_data: {get_param: ServiceConfigSettings}
1134 controller_extraconfig:
1137 - {get_param: controllerExtraConfig}
1138 - {get_param: ControllerExtraConfig}
1140 mapped_data: {get_param: ExtraConfig}
1142 raw_data: {get_file: hieradata/common.yaml}
1145 net_ip_map: {get_attr: [NetIpMap, net_ip_map]}
1146 net_ip_subnet_map: {get_attr: [NetIpMap, net_ip_subnet_map]}
1147 net_ip_uri_map: {get_attr: [NetIpMap, net_ip_uri_map]}
1149 raw_data: {get_file: hieradata/ceph.yaml}
1151 ceph::profile::params::cluster_network: {get_input: ceph_cluster_network}
1152 ceph::profile::params::public_network: {get_input: ceph_public_network}
1153 ceph::profile::params::public_addr: {get_input: ceph_public_ip}
1155 raw_data: {get_file: hieradata/database.yaml}
1157 raw_data: {get_file: hieradata/object.yaml}
1159 raw_data: {get_file: hieradata/controller.yaml}
1160 mapped_data: # data supplied directly to this deployment configuration, etc
1161 bootstack_nodeid: {get_input: bootstack_nodeid}
1164 enable_fencing: {get_input: enable_fencing}
1165 enable_load_balancer: {get_input: enable_load_balancer}
1166 hacluster_pwd: {get_input: pcsd_password}
1167 corosync_ipv6: {get_input: corosync_ipv6}
1168 tripleo::fencing::config: {get_input: fencing_config}
1171 # FIXME: need to move proxy_local_net_ip into swift-proxy.yaml
1172 swift::proxy::proxy_local_net_ip: {get_input: swift_proxy_network}
1173 swift::storage::all::storage_local_net_ip: {get_input: swift_management_network}
1174 swift::swift_hash_suffix: {get_input: swift_hash_suffix}
1175 tripleo::ringbuilder::build_ring: { get_input: swift_ring_build }
1176 tripleo::ringbuilder::part_power: {get_input: swift_part_power}
1177 tripleo::ringbuilder::replicas: {get_input: swift_replicas}
1178 tripleo::ringbuilder::min_part_hours: {get_input: swift_min_part_hours}
1179 swift_mount_check: {get_input: swift_mount_check}
1182 cinder_enable_db_purge: {get_input: cinder_enable_db_purge}
1183 cinder_enable_nfs_backend: {get_input: cinder_enable_nfs_backend}
1184 cinder_enable_rbd_backend: {get_input: cinder_enable_rbd_backend}
1185 cinder_nfs_mount_options: {get_input: cinder_nfs_mount_options}
1186 cinder_nfs_servers: {get_input: cinder_nfs_servers}
1187 cinder_lvm_loop_device_size: {get_input: cinder_lvm_loop_device_size}
1188 cinder_iscsi_helper: {get_input: cinder_iscsi_helper}
1189 cinder_iscsi_ip_address: {get_input: cinder_iscsi_network}
1190 cinder::database_connection: {get_input: cinder_dsn}
1191 cinder::api::keystone_password: {get_input: cinder_password}
1192 cinder::api::auth_uri: {get_input: keystone_auth_uri}
1193 cinder::api::identity_uri: {get_input: keystone_identity_uri}
1194 cinder::api::bind_host: {get_input: cinder_api_network}
1195 cinder::rabbit_userid: {get_input: rabbit_username}
1196 cinder::rabbit_password: {get_input: rabbit_password}
1197 cinder::rabbit_use_ssl: {get_input: rabbit_client_use_ssl}
1198 cinder::rabbit_port: {get_input: rabbit_client_port}
1199 cinder::debug: {get_input: debug}
1200 cinder_enable_iscsi_backend: {get_input: cinder_enable_iscsi_backend}
1201 cinder::glance::glance_api_servers: {get_input: glance_api_servers}
1202 cinder_backend_config: {get_input: CinderBackendConfig}
1203 cinder::db::mysql::password: {get_input: cinder_password}
1204 cinder::keystone::auth::public_url: {get_input: cinder_public_url }
1205 cinder::keystone::auth::internal_url: {get_input: cinder_internal_url }
1206 cinder::keystone::auth::admin_url: {get_input: cinder_admin_url }
1207 cinder::keystone::auth::public_url_v2: {get_input: cinder_public_url_v2 }
1208 cinder::keystone::auth::internal_url_v2: {get_input: cinder_internal_url_v2 }
1209 cinder::keystone::auth::admin_url_v2: {get_input: cinder_admin_url_v2 }
1210 cinder::keystone::auth::password: {get_input: cinder_password }
1211 cinder::keystone::auth::region: {get_input: keystone_region}
1214 glance::api::bind_host: {get_input: glance_api_network}
1215 glance::registry::bind_host: {get_input: glance_registry_network}
1216 glance::keystone::auth::region: {get_input: keystone_region}
1219 heat::api::bind_host: {get_input: heat_api_network}
1220 heat::api_cloudwatch::bind_host: {get_input: heat_api_network}
1221 heat::api_cfn::bind_host: {get_input: heat_api_network}
1222 heat::engine::auth_encryption_key: {get_input: heat_auth_encryption_key}
1225 keystone::admin_bind_host: {get_input: keystone_admin_api_network}
1226 keystone::public_bind_host: {get_input: keystone_public_api_network}
1227 keystone::wsgi::apache::bind_host: {get_input: keystone_public_api_network}
1228 keystone::wsgi::apache::admin_bind_host: {get_input: keystone_admin_api_network}
1230 mongodb::server::bind_ip: {get_input: mongo_db_network}
1231 mongodb::server::nojournal: {get_input: mongodb_no_journal}
1232 mongodb::server::ipv6: {get_input: mongodb_ipv6}
1234 admin_password: {get_input: admin_password}
1235 enable_galera: {get_input: enable_galera}
1236 enable_ceph_storage: {get_input: enable_ceph_storage}
1237 enable_swift_storage: {get_input: enable_swift_storage}
1238 mysql_innodb_buffer_pool_size: {get_input: mysql_innodb_buffer_pool_size}
1239 mysql_max_connections: {get_input: mysql_max_connections}
1240 mysql::server::root_password: {get_input: mysql_root_password}
1241 mysql_clustercheck_password: {get_input: mysql_clustercheck_password}
1242 mysql_cluster_name: {get_input: mysql_cluster_name}
1243 mysql_bind_host: {get_input: mysql_network}
1244 mysql_virtual_ip: {get_input: mysql_virtual_ip}
1247 neutron::bind_host: {get_input: neutron_api_network}
1248 neutron::server::auth_uri: {get_input: keystone_auth_uri}
1249 neutron::server::identity_uri: {get_input: keystone_identity_uri}
1250 neutron::server::database_connection: {get_input: neutron_dsn}
1251 neutron::server::api_workers: {get_input: neutron_workers}
1252 neutron::network_device_mtu: {get_input: neutron_tenant_mtu}
1253 neutron::agents::ml2::ovs::enable_tunneling: {get_input: neutron_enable_tunneling}
1254 neutron::agents::ml2::ovs::l2_population: {get_input: neutron_enable_l2pop}
1255 neutron::agents::ml2::ovs::local_ip: {get_input: neutron_local_ip}
1256 neutron::plugins::ml2::flat_networks: {get_input: neutron_flat_networks}
1257 neutron::agents::metadata::metadata_ip: {get_input: neutron_api_network}
1258 neutron_agent_mode: {get_input: neutron_agent_mode}
1259 neutron_router_distributed: {get_input: neutron_router_distributed}
1260 neutron::core_plugin: {get_input: neutron_core_plugin}
1261 neutron::service_plugins: {get_input: neutron_service_plugins}
1262 neutron::enable_ovs_agent: {get_input: neutron_enable_ovs_agent}
1263 neutron::plugins::ml2::type_drivers: {get_input: neutron_type_drivers}
1264 neutron::plugins::ml2::mechanism_drivers: {get_input: neutron_mechanism_drivers}
1265 neutron::plugins::ml2::extension_drivers: {get_input: neutron_plugin_extensions}
1266 neutron::server::allow_automatic_l3agent_failover: {get_input: neutron_allow_l3agent_failover}
1267 neutron::server::l3_ha: {get_input: neutron_l3_ha}
1268 neutron::plugins::ml2::network_vlan_ranges: {get_input: neutron_network_vlan_ranges}
1269 neutron::plugins::ml2::tunnel_id_ranges: {get_input: neutron_tunnel_id_ranges}
1270 neutron::plugins::ml2::vni_ranges: {get_input: neutron_vni_ranges}
1271 neutron::agents::ml2::ovs::bridge_mappings: {get_input: neutron_bridge_mappings}
1272 neutron_public_interface: {get_input: neutron_public_interface}
1273 neutron_public_interface_raw_device: {get_input: neutron_public_interface_raw_device}
1274 neutron_public_interface_default_route: {get_input: neutron_public_interface_default_route}
1275 neutron_public_interface_tag: {get_input: neutron_public_interface_tag}
1276 neutron::plugins::ml2::tenant_network_types: {get_input: neutron_tenant_network_types}
1277 neutron::agents::ml2::ovs::tunnel_types: {get_input: neutron_tunnel_types}
1278 neutron::agents::ml2::ovs::extensions: {get_input: neutron_agent_extensions}
1279 neutron::server::auth_password: {get_input: neutron_password}
1280 neutron_dsn: {get_input: neutron_dsn}
1281 neutron::db::mysql::password: {get_input: neutron_password}
1282 neutron::keystone::auth::public_url: {get_input: neutron_public_url }
1283 neutron::keystone::auth::internal_url: {get_input: neutron_internal_url }
1284 neutron::keystone::auth::admin_url: {get_input: neutron_admin_url }
1285 neutron::keystone::auth::password: {get_input: neutron_password }
1286 neutron::keystone::auth::region: {get_input: keystone_region}
1287 neutron::server::notifications::nova_url: {get_input: nova_internal_url}
1288 neutron::server::notifications::auth_url: {get_input: neutron_auth_url}
1289 neutron::server::notifications::tenant_name: 'service'
1290 neutron::server::notifications::project_name: 'service'
1291 neutron::server::notifications::password: {get_input: nova_password}
1294 ceilometer_backend: {get_input: ceilometer_backend}
1295 ceilometer_mysql_conn_string: {get_input: ceilometer_dsn}
1296 ceilometer::metering_secret: {get_input: ceilometer_metering_secret}
1297 ceilometer::rabbit_userid: {get_input: rabbit_username}
1298 ceilometer::rabbit_password: {get_input: rabbit_password}
1299 ceilometer::rabbit_use_ssl: {get_input: rabbit_client_use_ssl}
1300 ceilometer::rabbit_port: {get_input: rabbit_client_port}
1301 ceilometer::debug: {get_input: debug}
1302 ceilometer::api::host: {get_input: ceilometer_api_network}
1303 ceilometer::api::keystone_password: {get_input: ceilometer_password}
1304 ceilometer::api::keystone_auth_uri: {get_input: keystone_auth_uri}
1305 ceilometer::api::keystone_identity_uri: {get_input: keystone_identity_uri}
1306 ceilometer::agent::auth::auth_password: {get_input: ceilometer_password}
1307 ceilometer::agent::auth::auth_url: {get_input: keystone_auth_uri}
1308 ceilometer::agent::central::coordination_url: {get_input: ceilometer_coordination_url}
1309 ceilometer::agent::notification::store_events: {get_input: ceilometer_store_events}
1310 ceilometer::db::mysql::password: {get_input: ceilometer_password}
1311 ceilometer::collector::meter_dispatcher: {get_input: ceilometer_meter_dispatcher}
1312 ceilometer::dispatcher::gnocchi::url: {get_input: gnocchi_internal_url }
1313 ceilometer::dispatcher::gnocchi::filter_project: 'service'
1314 ceilometer::dispatcher::gnocchi::archive_policy: 'low'
1315 ceilometer::dispatcher::gnocchi::resources_definition_file: 'gnocchi_resources.yaml'
1316 ceilometer::keystone::auth::public_url: {get_input: ceilometer_public_url }
1317 ceilometer::keystone::auth::internal_url: {get_input: ceilometer_internal_url }
1318 ceilometer::keystone::auth::admin_url: {get_input: ceilometer_admin_url }
1319 ceilometer::keystone::auth::password: {get_input: ceilometer_password }
1320 ceilometer::keystone::auth::region: {get_input: keystone_region}
1321 snmpd_readonly_user_name: {get_input: snmpd_readonly_user_name}
1322 snmpd_readonly_user_password: {get_input: snmpd_readonly_user_password}
1325 aodh::rabbit_userid: {get_input: rabbit_username}
1326 aodh::rabbit_password: {get_input: rabbit_password}
1327 aodh::rabbit_use_ssl: {get_input: rabbit_client_use_ssl}
1328 aodh::rabbit_port: {get_input: rabbit_client_port}
1329 aodh::debug: {get_input: debug}
1330 aodh::wsgi::apache::ssl: false
1331 aodh::wsgi::apache::bind_host: {get_input: aodh_api_network}
1332 aodh::api::service_name: 'httpd'
1333 aodh::api::host: {get_input: aodh_api_network}
1334 aodh::api::keystone_password: {get_input: aodh_password}
1335 aodh::api::keystone_auth_uri: {get_input: keystone_auth_uri}
1336 aodh::api::keystone_identity_uri: {get_input: keystone_identity_uri}
1337 aodh::auth::auth_password: {get_input: aodh_password}
1338 aodh::db::mysql::password: {get_input: aodh_password}
1339 # for a migration path from ceilometer-alarm to aodh, we use the same database & coordination
1340 aodh::evaluator::coordination_url: {get_input: ceilometer_coordination_url}
1341 aodh::keystone::auth::public_url: {get_input: aodh_public_url }
1342 aodh::keystone::auth::internal_url: {get_input: aodh_internal_url }
1343 aodh::keystone::auth::admin_url: {get_input: aodh_admin_url }
1344 aodh::keystone::auth::password: {get_input: aodh_password }
1345 aodh::keystone::auth::region: {get_input: keystone_region}
1348 gnocchi_backend: {get_input: gnocchi_backend}
1349 gnocchi_indexer_backend: {get_input: gnocchi_indexer_backend}
1350 gnocchi_mysql_conn_string: {get_input: gnocchi_dsn}
1351 gnocchi::debug: {get_input: debug}
1352 gnocchi::wsgi::apache::ssl: false
1353 gnocchi::wsgi::apache::bind_host: {get_input: gnocchi_api_network}
1354 gnocchi::api::service_name: 'httpd'
1355 gnocchi::api::host: {get_input: gnocchi_api_network}
1356 gnocchi::api::keystone_password: {get_input: gnocchi_password}
1357 gnocchi::api::keystone_auth_uri: {get_input: keystone_auth_uri}
1358 gnocchi::api::keystone_identity_uri: {get_input: keystone_identity_uri}
1359 gnocchi::db::mysql::password: {get_input: gnocchi_password}
1360 gnocchi::storage::swift::swift_authurl: {get_input: keystone_auth_uri}
1361 gnocchi::storage::swift::swift_key: {get_input: gnocchi_password}
1362 gnocchi::keystone::auth::public_url: {get_input: gnocchi_public_url }
1363 gnocchi::keystone::auth::internal_url: {get_input: gnocchi_internal_url }
1364 gnocchi::keystone::auth::admin_url: {get_input: gnocchi_admin_url }
1365 gnocchi::keystone::auth::password: {get_input: gnocchi_password }
1366 gnocchi::keystone::auth::region: {get_input: keystone_region}
1369 nova::rabbit_userid: {get_input: rabbit_username}
1370 nova::rabbit_password: {get_input: rabbit_password}
1371 nova::rabbit_use_ssl: {get_input: rabbit_client_use_ssl}
1372 nova::rabbit_port: {get_input: rabbit_client_port}
1373 nova::upgrade_level_compute: {get_input: upgrade_level_nova_compute}
1374 nova::debug: {get_input: debug}
1375 nova::use_ipv6: {get_input: nova_ipv6}
1376 nova::api::auth_uri: {get_input: keystone_auth_uri}
1377 nova::api::identity_uri: {get_input: keystone_identity_uri}
1378 nova::api::api_bind_address: {get_input: nova_api_network}
1379 nova::api::metadata_listen: {get_input: nova_metadata_network}
1380 nova::api::admin_password: {get_input: nova_password}
1381 nova::api::osapi_compute_workers: {get_input: nova_workers}
1382 nova::api::metadata_workers: {get_input: nova_workers}
1383 nova::compute::network_device_mtu: {get_input: neutron_tenant_mtu}
1384 nova::database_connection: {get_input: nova_dsn}
1385 nova::api_database_connection: {get_input: nova_api_dsn}
1386 nova::glance_api_servers: {get_input: glance_api_servers}
1387 nova::api::neutron_metadata_proxy_shared_secret: {get_input: neutron_metadata_proxy_shared_secret}
1388 nova::api::instance_name_template: {get_input: instance_name_template}
1389 nova::network::neutron::neutron_password: {get_input: neutron_password}
1390 nova::network::neutron::neutron_url: {get_input: neutron_internal_url}
1391 nova::network::neutron::neutron_auth_url: {get_input: neutron_auth_url}
1392 nova::vncproxy::host: {get_input: nova_api_network}
1393 nova::db::mysql::password: {get_input: nova_password}
1394 nova::db::mysql_api::password: {get_input: nova_password}
1395 nova_enable_db_purge: {get_input: nova_enable_db_purge}
1396 nova::keystone::auth::public_url: {get_input: nova_public_url}
1397 nova::keystone::auth::internal_url: {get_input: nova_internal_url}
1398 nova::keystone::auth::admin_url: {get_input: nova_admin_url}
1399 nova::keystone::auth::password: {get_input: nova_password }
1400 nova::keystone::auth::region: {get_input: keystone_region}
1403 apache::mod::remoteip::proxy_ips: {get_input: horizon_subnet}
1404 apache::ip: {get_input: horizon_network}
1405 horizon::allowed_hosts: {get_input: horizon_allowed_hosts}
1406 horizon::django_debug: {get_input: debug}
1407 horizon::secret_key: {get_input: horizon_secret}
1408 horizon::bind_address: {get_input: horizon_network}
1409 horizon::keystone_url: {get_input: keystone_auth_uri}
1412 rabbitmq::node_ip_address: {get_input: rabbitmq_network}
1413 rabbitmq::erlang_cookie: {get_input: rabbit_cookie}
1415 redis::bind: {get_input: redis_network}
1416 redis::requirepass: {get_input: redis_password}
1417 redis::masterauth: {get_input: redis_password}
1418 redis::sentinel_auth_pass: {get_input: redis_password}
1419 redis_vip: {get_input: redis_vip}
1421 tripleo::firewall::manage_firewall: {get_input: manage_firewall}
1422 tripleo::firewall::purge_firewall_rules: {get_input: purge_firewall_rules}
1424 memcached_ipv6: {get_input: memcached_ipv6}
1425 memcached::listen_ip: {get_input: memcached_network}
1426 neutron_public_interface_ip: {get_input: neutron_public_interface_ip}
1427 ntp::servers: {get_input: ntp_servers}
1428 timezone::timezone: {get_input: timezone}
1429 control_virtual_interface: {get_input: control_virtual_interface}
1430 public_virtual_interface: {get_input: public_virtual_interface}
1431 tripleo::loadbalancer::control_virtual_interface: {get_input: control_virtual_interface}
1432 tripleo::loadbalancer::public_virtual_interface: {get_input: public_virtual_interface}
1433 tripleo::loadbalancer::haproxy_log_address: {get_input: haproxy_log_address}
1434 tripleo::loadbalancer::service_certificate: {get_attr: [NodeTLSData, deployed_ssl_certificate_path]}
1435 tripleo::loadbalancer::haproxy_stats_user: {get_input: haproxy_stats_user}
1436 tripleo::loadbalancer::haproxy_stats_password: {get_input: haproxy_stats_password}
1437 tripleo::loadbalancer::redis_password: {get_input: redis_password}
1438 tripleo::packages::enable_install: {get_input: enable_package_install}
1439 tripleo::packages::enable_upgrade: {get_input: enable_package_upgrade}
1441 # Hook for site-specific additional pre-deployment config, e.g extra hieradata
1442 ControllerExtraConfigPre:
1443 depends_on: ControllerDeployment
1444 type: OS::TripleO::ControllerExtraConfigPre
1446 server: {get_resource: Controller}
1448 # Hook for site-specific additional pre-deployment config,
1449 # applying to all nodes, e.g node registration/unregistration
1451 depends_on: [ControllerExtraConfigPre, NodeTLSData]
1452 type: OS::TripleO::NodeExtraConfig
1454 server: {get_resource: Controller}
1457 type: OS::TripleO::Tasks::PackageUpdate
1460 type: OS::Heat::SoftwareDeployment
1462 name: UpdateDeployment
1463 config: {get_resource: UpdateConfig}
1464 server: {get_resource: Controller}
1467 get_param: UpdateIdentifier
1471 description: IP address of the server in the ctlplane network
1472 value: {get_attr: [Controller, networks, ctlplane, 0]}
1473 external_ip_address:
1474 description: IP address of the server in the external network
1475 value: {get_attr: [ExternalPort, ip_address]}
1476 internal_api_ip_address:
1477 description: IP address of the server in the internal_api network
1478 value: {get_attr: [InternalApiPort, ip_address]}
1480 description: IP address of the server in the storage network
1481 value: {get_attr: [StoragePort, ip_address]}
1482 storage_mgmt_ip_address:
1483 description: IP address of the server in the storage_mgmt network
1484 value: {get_attr: [StorageMgmtPort, ip_address]}
1486 description: IP address of the server in the tenant network
1487 value: {get_attr: [TenantPort, ip_address]}
1488 management_ip_address:
1489 description: IP address of the server in the management network
1490 value: {get_attr: [ManagementPort, ip_address]}
1492 description: Hostname of the server
1493 value: {get_attr: [Controller, name]}
1496 Server's IP address and hostname in the /etc/hosts format
1500 PRIMARYIP PRIMARYHOST.DOMAIN PRIMARYHOST
1501 EXTERNALIP EXTERNALHOST.DOMAIN EXTERNALHOST
1502 INTERNAL_APIIP INTERNAL_APIHOST.DOMAIN INTERNAL_APIHOST
1503 STORAGEIP STORAGEHOST.DOMAIN STORAGEHOST
1504 STORAGE_MGMTIP STORAGE_MGMTHOST.DOMAIN STORAGE_MGMTHOST
1505 TENANTIP TENANTHOST.DOMAIN TENANTHOST
1506 MANAGEMENTIP MANAGEMENTHOST.DOMAIN MANAGEMENTHOST
1508 PRIMARYIP: {get_attr: [NetIpMap, net_ip_map, {get_param: [ServiceNetMap, ControllerHostnameResolveNetwork]}]}
1509 DOMAIN: {get_param: CloudDomain}
1510 PRIMARYHOST: {get_attr: [Controller, name]}
1511 EXTERNALIP: {get_attr: [ExternalPort, ip_address]}
1515 - - {get_attr: [Controller, name]}
1517 INTERNAL_APIIP: {get_attr: [InternalApiPort, ip_address]}
1521 - - {get_attr: [Controller, name]}
1523 STORAGEIP: {get_attr: [StoragePort, ip_address]}
1527 - - {get_attr: [Controller, name]}
1529 STORAGE_MGMTIP: {get_attr: [StorageMgmtPort, ip_address]}
1533 - - {get_attr: [Controller, name]}
1535 TENANTIP: {get_attr: [TenantPort, ip_address]}
1539 - - {get_attr: [Controller, name]}
1541 MANAGEMENTIP: {get_attr: [ManagementPort, ip_address]}
1545 - - {get_attr: [Controller, name]}
1547 nova_server_resource:
1548 description: Heat resource handle for the Nova compute server
1550 {get_resource: Controller}
1552 description: Swift device formatted for swift-ring-builder
1555 template: 'r1z1-IP:%PORT%/d1'
1557 IP: {get_attr: [NetIpMap, net_ip_uri_map, {get_param: [ServiceNetMap, SwiftMgmtNetwork]}]}
1558 swift_proxy_memcache:
1559 description: Swift proxy-memcache value
1562 template: "IP:11211"
1564 IP: {get_attr: [NetIpMap, net_ip_uri_map, {get_param: [ServiceNetMap, MemcachedNetwork]}]}
1566 description: identifier which changes if the controller configuration may need re-applying
1570 - - {get_attr: [ControllerDeployment, deploy_stdout]}
1571 - {get_attr: [NodeTLSCAData, deploy_stdout]}
1572 - {get_attr: [NodeTLSData, deploy_stdout]}
1573 - {get_attr: [ControllerExtraConfigPre, deploy_stdout]}
1574 - {get_param: UpdateIdentifier}
1575 tls_key_modulus_md5:
1576 description: MD5 checksum of the TLS Key Modulus
1577 value: {get_attr: [NodeTLSData, key_modulus_md5]}
1578 tls_cert_modulus_md5:
1579 description: MD5 checksum of the TLS Certificate Modulus
1580 value: {get_attr: [NodeTLSData, cert_modulus_md5]}