Clarify horizon allowed hosts setting
[apex-tripleo-heat-templates.git] / puppet / services / nova-compute.yaml
1 heat_template_version: 2016-04-08
2
3 description: >
4   OpenStack Nova Compute service configured with Puppet
5
6 parameters:
7   ServiceNetMap:
8     default: {}
9     description: Mapping of service_name -> network name. Typically set
10                  via parameter_defaults in the resource registry.  This
11                  mapping overrides those in ServiceNetMapDefaults.
12     type: json
13   DefaultPasswords:
14     default: {}
15     type: json
16   EndpointMap:
17     default: {}
18     description: Mapping of service endpoint -> protocol. Typically set
19                  via parameter_defaults in the resource registry.
20     type: json
21   NovaRbdPoolName:
22     default: vms
23     type: string
24   CephClientUserName:
25     default: openstack
26     type: string
27   CinderEnableNfsBackend:
28     default: false
29     description: Whether to enable or not the NFS backend for Cinder
30     type: boolean
31   CinderEnableRbdBackend:
32     default: false
33     description: Whether to enable or not the Rbd backend for Cinder
34     type: boolean
35   NovaEnableRbdBackend:
36     default: false
37     description: Whether to enable or not the Rbd backend for Nova
38     type: boolean
39   NovaComputeLibvirtVifDriver:
40     default: ''
41     description: Libvirt VIF driver configuration for the network
42     type: string
43   NovaPCIPassthrough:
44     description: >
45       List of PCI Passthrough whitelist parameters.
46       Example -
47       NovaPCIPassthrough:
48         - vendor_id: "8086"
49           product_id: "154c"
50           address: "0000:05:00.0"
51           physical_network: "datacentre"
52       For different formats, refer to the nova.conf documentation for
53       pci_passthrough_whitelist configuration
54     type: json
55     default: ''
56   NovaVcpuPinSet:
57     description: >
58       A list or range of physical CPU cores to reserve for virtual machine
59       processes.
60       Ex. NovaVcpuPinSet: ['4-12','^8'] will reserve cores from 4-12 excluding 8
61     type: comma_delimited_list
62     default: []
63
64 resources:
65   NovaBase:
66     type: ./nova-base.yaml
67     properties:
68       ServiceNetMap: {get_param: ServiceNetMap}
69       DefaultPasswords: {get_param: DefaultPasswords}
70       EndpointMap: {get_param: EndpointMap}
71
72 outputs:
73   role_data:
74     description: Role data for the Nova Compute service.
75     value:
76       service_name: nova_compute
77       config_settings:
78         map_merge:
79           - get_attr: [NovaBase, role_data, config_settings]
80           - nova::compute::libvirt::manage_libvirt_services: false
81             nova::compute::pci_passthrough:
82               str_replace:
83                 template: "'JSON_PARAM'"
84                 params:
85                   JSON_PARAM: {get_param: NovaPCIPassthrough}
86             nova::compute::vcpu_pin_set: {get_param: NovaVcpuPinSet}
87             # we manage migration in nova common puppet profile
88             nova::compute::libvirt::migration_support: false
89             tripleo::profile::base::nova::manage_migration: true
90             tripleo::profile::base::nova::nova_compute_enabled: true
91             nova::compute::rbd::libvirt_images_rbd_pool: {get_param: NovaRbdPoolName}
92             nova::compute::rbd::libvirt_rbd_user: {get_param: CephClientUserName}
93             tripleo::profile::base::nova::compute::cinder_nfs_backend: {get_param: CinderEnableNfsBackend}
94             rbd_persistent_storage: {get_param: CinderEnableRbdBackend}
95             nova::compute::rbd::rbd_keyring:
96               list_join:
97               - '.'
98               - - 'client'
99                 - {get_param: CephClientUserName}
100             nova::compute::rbd::libvirt_rbd_secret_uuid: '"%{hiera(\"ceph::profile::params::fsid\")}"'
101             nova::compute::instance_usage_audit: true
102             nova::compute::instance_usage_audit_period: 'hour'
103             nova::compute::rbd::ephemeral_storage: {get_param: NovaEnableRbdBackend}
104             # TUNNELLED mode provides a security enhancement when using shared
105             # storage but is not supported when not using shared storage.
106             # See https://bugzilla.redhat.com/show_bug.cgi?id=1301986#c12
107             # In future versions of QEMU (2.6, mostly), danpb's native
108             # encryption work will obsolete the need to use TUNNELLED transport
109             # mode.
110             nova::migration::live_migration_tunnelled: {get_param: NovaEnableRbdBackend}
111             # Changing the default from 512MB. The current templates can not deploy
112             # overclouds with swap. On an idle compute node, we see ~1024MB of RAM
113             # used. 2048 is suggested to account for other possible operations for
114             # example openvswitch.
115             nova::compute::reserved_host_memory: 2048
116             nova::compute::neutron::libvirt_vif_driver: {get_param: NovaComputeLibvirtVifDriver}
117             # NOTE: bind IP is found in Heat replacing the network name with the
118             # local node IP for the given network; replacement examples
119             # (eg. for internal_api):
120             # internal_api -> IP
121             # internal_api_uri -> [IP]
122             # internal_api_subnet - > IP/CIDR
123             nova::compute::vncserver_proxyclient_address: {get_param: [ServiceNetMap, NovaVncProxyNetwork]}
124             nova::compute::vncproxy_host: {get_param: [EndpointMap, NovaPublic, host]}
125       step_config: |
126         # TODO(emilien): figure how to deal with libvirt profile.
127         # We'll probably treat it like we do with Neutron plugins.
128         # Until then, just include it in the default nova-compute role.
129         include tripleo::profile::base::nova::compute::libvirt