Merge "Ironic: add missing haproxy and firewall configuration"
[apex-tripleo-heat-templates.git] / puppet / services / nova-compute.yaml
1 heat_template_version: 2016-04-08
2
3 description: >
4   OpenStack Nova Compute service configured with Puppet
5
6 parameters:
7   ServiceNetMap:
8     default: {}
9     description: Mapping of service_name -> network name. Typically set
10                  via parameter_defaults in the resource registry.  This
11                  mapping overrides those in ServiceNetMapDefaults.
12     type: json
13   DefaultPasswords:
14     default: {}
15     type: json
16   EndpointMap:
17     default: {}
18     description: Mapping of service endpoint -> protocol. Typically set
19                  via parameter_defaults in the resource registry.
20     type: json
21   NovaRbdPoolName:
22     default: vms
23     type: string
24   CephClientUserName:
25     default: openstack
26     type: string
27   CinderEnableNfsBackend:
28     default: false
29     description: Whether to enable or not the NFS backend for Cinder
30     type: boolean
31   CinderEnableRbdBackend:
32     default: false
33     description: Whether to enable or not the Rbd backend for Cinder
34     type: boolean
35   NovaEnableRbdBackend:
36     default: false
37     description: Whether to enable or not the Rbd backend for Nova
38     type: boolean
39   NovaComputeLibvirtVifDriver:
40     default: ''
41     description: Libvirt VIF driver configuration for the network
42     type: string
43
44 resources:
45   NovaBase:
46     type: ./nova-base.yaml
47     properties:
48       ServiceNetMap: {get_param: ServiceNetMap}
49       DefaultPasswords: {get_param: DefaultPasswords}
50       EndpointMap: {get_param: EndpointMap}
51
52 outputs:
53   role_data:
54     description: Role data for the Nova Compute service.
55     value:
56       service_name: nova_compute
57       config_settings:
58         map_merge:
59           - get_attr: [NovaBase, role_data, config_settings]
60           - nova::compute::libvirt::manage_libvirt_services: false
61             # we manage migration in nova common puppet profile
62             nova::compute::libvirt::migration_support: false
63             tripleo::profile::base::nova::manage_migration: true
64             tripleo::profile::base::nova::nova_compute_enabled: true
65             nova::compute::rbd::libvirt_images_rbd_pool: {get_param: NovaRbdPoolName}
66             nova::compute::rbd::libvirt_rbd_user: {get_param: CephClientUserName}
67             tripleo::profile::base::nova::compute::cinder_nfs_backend: {get_param: CinderEnableNfsBackend}
68             rbd_persistent_storage: {get_param: CinderEnableRbdBackend}
69             nova::compute::rbd::rbd_keyring:
70               list_join:
71               - '.'
72               - - 'client'
73                 - {get_param: CephClientUserName}
74             nova::compute::rbd::libvirt_rbd_secret_uuid: '"%{hiera(\"ceph::profile::params::fsid\")}"'
75             nova::compute::instance_usage_audit: true
76             nova::compute::instance_usage_audit_period: 'hour'
77             nova::compute::rbd::ephemeral_storage: {get_param: NovaEnableRbdBackend}
78             # TUNNELLED mode provides a security enhancement when using shared
79             # storage but is not supported when not using shared storage.
80             # See https://bugzilla.redhat.com/show_bug.cgi?id=1301986#c12
81             # In future versions of QEMU (2.6, mostly), danpb's native
82             # encryption work will obsolete the need to use TUNNELLED transport
83             # mode.
84             nova::migration::live_migration_tunnelled: {get_param: NovaEnableRbdBackend}
85             # Changing the default from 512MB. The current templates can not deploy
86             # overclouds with swap. On an idle compute node, we see ~1024MB of RAM
87             # used. 2048 is suggested to account for other possible operations for
88             # example openvswitch.
89             nova::compute::reserved_host_memory: 2048
90             nova::compute::neutron::libvirt_vif_driver: {get_param: NovaComputeLibvirtVifDriver}
91             # NOTE: bind IP is found in Heat replacing the network name with the
92             # local node IP for the given network; replacement examples
93             # (eg. for internal_api):
94             # internal_api -> IP
95             # internal_api_uri -> [IP]
96             # internal_api_subnet - > IP/CIDR
97             nova::compute::vncserver_proxyclient_address: {get_param: [ServiceNetMap, NovaVncProxyNetwork]}
98             nova::compute::vncproxy_host: {get_param: [EndpointMap, NovaPublic, host]}
99       step_config: |
100         # TODO(emilien): figure how to deal with libvirt profile.
101         # We'll probably treat it like we do with Neutron plugins.
102         # Until then, just include it in the default nova-compute role.
103         include tripleo::profile::base::nova::compute::libvirt