Add DefaultPasswords to composable services
[apex-tripleo-heat-templates.git] / puppet / services / heat-api.yaml
1 heat_template_version: 2016-04-08
2
3 description: >
4   Openstack Heat API service configured with Puppet
5
6 parameters:
7   ServiceNetMap:
8     default: {}
9     description: Mapping of service_name -> network name. Typically set
10                  via parameter_defaults in the resource registry.  This
11                  mapping overrides those in ServiceNetMapDefaults.
12     type: json
13   DefaultPasswords:
14     default: {}
15     type: json
16   EndpointMap:
17     default: {}
18     description: Mapping of service endpoint -> protocol. Typically set
19                  via parameter_defaults in the resource registry.
20     type: json
21   HeatWorkers:
22     default: 0
23     description: Number of workers for Heat service.
24     type: number
25   HeatPassword:
26     description: The password for the Heat service and db account, used by the Heat services.
27     type: string
28     hidden: true
29   KeystoneRegion:
30     type: string
31     default: 'regionOne'
32     description: Keystone region for endpoint
33
34 resources:
35   HeatBase:
36     type: ./heat-base.yaml
37     properties:
38       ServiceNetMap: {get_param: ServiceNetMap}
39       DefaultPasswords: {get_param: DefaultPasswords}
40       EndpointMap: {get_param: EndpointMap}
41
42 outputs:
43   role_data:
44     description: Role data for the Heat API role.
45     value:
46       service_name: heat_api
47       config_settings:
48         map_merge:
49           - get_attr: [HeatBase, role_data, config_settings]
50           - heat::api::workers: {get_param: HeatWorkers}
51             heat::keystone::auth::tenant: 'service'
52             heat::keystone::auth::public_url: {get_param: [EndpointMap, HeatPublic, uri]}
53             heat::keystone::auth::internal_url: {get_param: [EndpointMap, HeatInternal, uri]}
54             heat::keystone::auth::admin_url: {get_param: [EndpointMap, HeatAdmin, uri]}
55             heat::keystone::auth::password: {get_param: HeatPassword}
56             heat::keystone::auth::region: {get_param: KeystoneRegion}
57             tripleo.heat_api.firewall_rules:
58               '125 heat_api':
59                 dport:
60                   - 8004
61                   - 13004
62       step_config: |
63         include ::tripleo::profile::base::heat::api