1 heat_template_version: 2016-04-08
4 OpenStack Neutron Server configured with Puppet
9 description: Mapping of service_name -> network name. Typically set
10 via parameter_defaults in the resource registry. This
11 mapping overrides those in ServiceNetMapDefaults.
18 description: Mapping of service endpoint -> protocol. Typically set
19 via parameter_defaults in the resource registry.
23 description: Number of workers for Neutron service.
26 description: The password for the neutron service and db account, used by neutron agents.
29 NeutronAllowL3AgentFailover:
31 description: Allow automatic l3-agent failover
35 description: Whether to enable HA for virtual routers
38 description: The password for the nova service and db account, used by nova-api.
42 description: Enable Neutron DVR.
48 description: Keystone region for endpoint
53 type: ./neutron-base.yaml
55 ServiceNetMap: {get_param: ServiceNetMap}
56 DefaultPasswords: {get_param: DefaultPasswords}
57 EndpointMap: {get_param: EndpointMap}
61 description: Role data for the Neutron Server agent service.
63 service_name: neutron_api
66 - get_attr: [NeutronBase, role_data, config_settings]
67 neutron::server::database_connection:
70 - - {get_param: [EndpointMap, MysqlInternal, protocol]}
72 - {get_param: NeutronPassword}
74 - {get_param: [EndpointMap, MysqlInternal, host]}
76 neutron::keystone::auth::tenant: 'service'
77 neutron::keystone::auth::public_url: {get_param: [EndpointMap, NeutronPublic, uri]}
78 neutron::keystone::auth::internal_url: { get_param: [ EndpointMap, NeutronInternal, uri ] }
79 neutron::keystone::auth::admin_url: { get_param: [ EndpointMap, NeutronAdmin, uri ] }
80 neutron::keystone::auth::password: {get_param: NeutronPassword}
81 neutron::keystone::auth::region: {get_param: KeystoneRegion}
82 neutron::keystone::authtoken::auth_uri: {get_param: [EndpointMap, KeystoneInternal, uri] }
83 neutron::keystone::authtoken::auth_url: {get_param: [EndpointMap, KeystoneAdmin, uri_no_suffix]}
84 neutron::server::api_workers: {get_param: NeutronWorkers}
85 neutron::server::allow_automatic_l3agent_failover: {get_param: NeutronAllowL3AgentFailover}
86 neutron::server::l3_ha: {get_param: NeutronL3HA}
87 neutron::keystone::authtoken::password: {get_param: NeutronPassword}
89 neutron::server::notifications::nova_url: { get_param: [ EndpointMap, NovaInternal, uri ] }
90 neutron::server::notifications::auth_url: { get_param: [ EndpointMap, KeystoneV3Admin, uri ] }
91 neutron::server::notifications::tenant_name: 'service'
92 neutron::server::notifications::project_name: 'service'
93 neutron::server::notifications::password: {get_param: NovaPassword}
94 neutron::keystone::authtoken::project_name: 'service'
95 neutron::server::sync_db: true
96 neutron::db::mysql::password: {get_param: NeutronPassword}
97 neutron::db::mysql::user: neutron
98 neutron::db::mysql::host: {get_param: [EndpointMap, MysqlInternal, host_nobrackets]}
99 neutron::db::mysql::dbname: ovs_neutron
100 neutron::db::mysql::allowed_hosts:
102 - "%{hiera('mysql_bind_host')}"
103 tripleo.neutron_server.firewall_rules:
104 '114 neutron server':
108 '118 neutron vxlan networks':
113 neutron::server::router_distributed: {get_param: NeutronEnableDVR}
114 # NOTE: bind IP is found in Heat replacing the network name with the local node IP
115 # for the given network; replacement examples (eg. for internal_api):
117 # internal_api_uri -> [IP]
118 # internal_api_subnet - > IP/CIDR
119 neutron::bind_host: {get_param: [ServiceNetMap, NeutronApiNetwork]}
121 include tripleo::profile::base::neutron::server