1 heat_template_version: 2016-10-14
4 OpenStack Neutron Server configured with Puppet
9 description: Mapping of service_name -> network name. Typically set
10 via parameter_defaults in the resource registry. This
11 mapping overrides those in ServiceNetMapDefaults.
18 description: Mapping of service endpoint -> protocol. Typically set
19 via parameter_defaults in the resource registry.
24 Sets the number of API and RPC workers for the Neutron service. The
25 default value results in the configuration being left unset and a
26 system-dependent default will be chosen (usually the number of
27 processors). Please note that this can result in a large number of
28 processes and memory consumption on systems with a large core count. On
29 such systems it is recommended that a non-default value be selected that
30 matches the load requirements.
33 description: The password for the neutron service and db account, used by neutron agents.
36 NeutronAllowL3AgentFailover:
38 description: Allow automatic l3-agent failover
41 description: The password for the nova service and db account, used by nova-api.
45 description: Enable Neutron DVR.
51 description: Keystone region for endpoint
52 MonitoringSubscriptionNeutronServer:
53 default: 'overcloud-neutron-server'
55 NeutronApiLoggingSource:
58 tag: openstack.neutron.api
59 path: /var/log/neutron/server.log
62 Under normal conditions, this should not be overridden manually and is
63 set at deployment time. The default value is present to allow the
64 template to be used in environments that do not override it.
68 # DEPRECATED: the following options are deprecated and are currently maintained
69 # for backwards compatibility. They will be removed in the Ocata cycle.
73 Whether to enable HA for virtual routers. While the default value is
74 'false', L3 HA will be automatically enabled if the number of nodes
75 hosting controller configurations and DVR is disabled. This parameter is
76 being deprecated in Newton and is scheduled to be removed in Ocata.
77 Future releases will enable L3 HA by default if it is appropriate for the
78 deployment type. Alternate mechanisms will be available to override.
84 The following parameters are deprecated and will be removed. They should not
85 be relied on for new deployments. If you have concerns regarding deprecated
86 parameters, please contact the TripleO development team on IRC or the
87 OpenStack mailing list.
94 type: ./neutron-base.yaml
96 ServiceNetMap: {get_param: ServiceNetMap}
97 DefaultPasswords: {get_param: DefaultPasswords}
98 EndpointMap: {get_param: EndpointMap}
106 - get_param: ControllerCount
109 - get_param: NeutronEnableDVR
114 description: Role data for the Neutron Server agent service.
116 service_name: neutron_api
117 monitoring_subscription: {get_param: MonitoringSubscriptionNeutronServer}
118 logging_source: {get_param: NeutronApiLoggingSource}
123 - get_attr: [NeutronBase, role_data, config_settings]
124 - neutron::server::database_connection:
127 - - {get_param: [EndpointMap, MysqlInternal, protocol]}
129 - {get_param: NeutronPassword}
131 - {get_param: [EndpointMap, MysqlInternal, host]}
133 neutron::keystone::authtoken::auth_uri: {get_param: [EndpointMap, KeystoneInternal, uri] }
134 neutron::keystone::authtoken::auth_url: {get_param: [EndpointMap, KeystoneAdmin, uri_no_suffix]}
135 neutron::server::api_workers: {get_param: NeutronWorkers}
136 neutron::server::rpc_workers: {get_param: NeutronWorkers}
137 neutron::server::allow_automatic_l3agent_failover: {get_param: NeutronAllowL3AgentFailover}
138 neutron::server::l3_ha: {if: ["auto_enable_l3_ha", true, {get_param: NeutronL3HA}]}
139 neutron::keystone::authtoken::password: {get_param: NeutronPassword}
141 neutron::server::notifications::nova_url: { get_param: [ EndpointMap, NovaInternal, uri ] }
142 neutron::server::notifications::auth_url: { get_param: [ EndpointMap, KeystoneV3Admin, uri ] }
143 neutron::server::notifications::tenant_name: 'service'
144 neutron::server::notifications::project_name: 'service'
145 neutron::server::notifications::password: {get_param: NovaPassword}
146 neutron::keystone::authtoken::project_name: 'service'
147 neutron::server::sync_db: true
148 tripleo.neutron_api.firewall_rules:
153 neutron::server::router_distributed: {get_param: NeutronEnableDVR}
154 # NOTE: bind IP is found in Heat replacing the network name with the local node IP
155 # for the given network; replacement examples (eg. for internal_api):
157 # internal_api_uri -> [IP]
158 # internal_api_subnet - > IP/CIDR
159 neutron::bind_host: {get_param: [ServiceNetMap, NeutronApiNetwork]}
161 include tripleo::profile::base::neutron::server
162 service_config_settings:
164 neutron::keystone::auth::tenant: 'service'
165 neutron::keystone::auth::public_url: {get_param: [EndpointMap, NeutronPublic, uri]}
166 neutron::keystone::auth::internal_url: { get_param: [ EndpointMap, NeutronInternal, uri ] }
167 neutron::keystone::auth::admin_url: { get_param: [ EndpointMap, NeutronAdmin, uri ] }
168 neutron::keystone::auth::password: {get_param: NeutronPassword}
169 neutron::keystone::auth::region: {get_param: KeystoneRegion}
171 neutron::db::mysql::password: {get_param: NeutronPassword}
172 neutron::db::mysql::user: neutron
173 neutron::db::mysql::host: {get_param: [EndpointMap, MysqlInternal, host_nobrackets]}
174 neutron::db::mysql::dbname: ovs_neutron
175 neutron::db::mysql::allowed_hosts:
177 - "%{hiera('mysql_bind_host')}"