puppet/services/neutron-api.yaml

   1 heat_template_version: 2016-04-08
   2
   3 description: >
   4   OpenStack Neutron Server configured with Puppet
   5
   6 parameters:
   7   ServiceNetMap:
   8     default: {}
   9     description: Mapping of service_name -> network name. Typically set
  10                  via parameter_defaults in the resource registry.  This
  11                  mapping overrides those in ServiceNetMapDefaults.
  12     type: json
  13   DefaultPasswords:
  14     default: {}
  15     type: json
  16   EndpointMap:
  17     default: {}
  18     description: Mapping of service endpoint -> protocol. Typically set
  19                  via parameter_defaults in the resource registry.
  20     type: json
  21   NeutronWorkers:
  22     default: 0
  23     description: Number of workers for Neutron service.
  24     type: number
  25   NeutronPassword:
  26     description: The password for the neutron service and db account, used by neutron agents.
  27     type: string
  28     hidden: true
  29   NeutronAllowL3AgentFailover:
  30     default: 'True'
  31     description: Allow automatic l3-agent failover
  32     type: string
  33   NeutronL3HA:
  34     default: false
  35     description: Whether to enable HA for virtual routers
  36     type: boolean
  37   NovaPassword:
  38     description: The password for the nova service and db account, used by nova-api.
  39     type: string
  40     hidden: true
  41   NeutronEnableDVR:
  42     description: Enable Neutron DVR.
  43     default: false
  44     type: boolean
  45   KeystoneRegion:
  46     type: string
  47     default: 'regionOne'
  48     description: Keystone region for endpoint
  49
  50 resources:
  51
  52   NeutronBase:
  53     type: ./neutron-base.yaml
  54     properties:
  55       ServiceNetMap: {get_param: ServiceNetMap}
  56       DefaultPasswords: {get_param: DefaultPasswords}
  57       EndpointMap: {get_param: EndpointMap}
  58
  59 outputs:
  60   role_data:
  61     description: Role data for the Neutron Server agent service.
  62     value:
  63       service_name: neutron_api
  64       config_settings:
  65         map_merge:
  66           - get_attr: [NeutronBase, role_data, config_settings]
  67             neutron::server::database_connection:
  68               list_join:
  69                 - ''
  70                 - - {get_param: [EndpointMap, MysqlInternal, protocol]}
  71                   - '://neutron:'
  72                   - {get_param: NeutronPassword}
  73                   - '@'
  74                   - {get_param: [EndpointMap, MysqlInternal, host]}
  75                   - '/ovs_neutron'
  76             neutron::keystone::auth::tenant: 'service'
  77             neutron::keystone::auth::public_url: {get_param: [EndpointMap, NeutronPublic, uri]}
  78             neutron::keystone::auth::internal_url: { get_param: [ EndpointMap, NeutronInternal, uri ] }
  79             neutron::keystone::auth::admin_url: { get_param: [ EndpointMap, NeutronAdmin, uri ] }
  80             neutron::keystone::auth::password: {get_param: NeutronPassword}
  81             neutron::keystone::auth::region: {get_param: KeystoneRegion}
  82             neutron::server::auth_uri: {get_param: [EndpointMap, KeystoneInternal, uri] }
  83             neutron::server::auth_url: {get_param: [EndpointMap, KeystoneAdmin, uri_no_suffix]}
  84             neutron::server::api_workers: {get_param: NeutronWorkers}
  85             neutron::server::allow_automatic_l3agent_failover: {get_param: NeutronAllowL3AgentFailover}
  86             neutron::server::l3_ha: {get_param: NeutronL3HA}
  87             neutron::server::password: {get_param: NeutronPassword}
  88
  89             neutron::server::notifications::nova_url: { get_param: [ EndpointMap, NovaInternal, uri ] }
  90             neutron::server::notifications::auth_url: { get_param: [ EndpointMap, KeystoneV3Admin, uri ] }
  91             neutron::server::notifications::tenant_name: 'service'
  92             neutron::server::notifications::project_name: 'service'
  93             neutron::server::notifications::password: {get_param: NovaPassword}
  94             neutron::server::project_name: 'service'
  95             neutron::server::sync_db: true
  96             neutron::db::mysql::password: {get_param: NeutronPassword}
  97             neutron::db::mysql::user: neutron
  98             neutron::db::mysql::host: {get_param: [EndpointMap, MysqlInternal, host_nobrackets]}
  99             neutron::db::mysql::dbname: ovs_neutron
 100             neutron::db::mysql::allowed_hosts:
 101               - '%'
 102               - "%{hiera('mysql_bind_host')}"
 103             tripleo.neutron_server.firewall_rules:
 104               '114 neutron server':
 105                 dport:
 106                   - 9696
 107                   - 13696
 108               '118 neutron vxlan networks':
 109                 proto: 'udp'
 110                 dport: 4789
 111               '106 vrrp':
 112                 proto: vrrp
 113             neutron::server::router_distributed: {get_param: NeutronEnableDVR}
 114       step_config: |
 115         include tripleo::profile::base::neutron::server