Get rid of global service-password.
[apex-tripleo-heat-templates.git] / undercloud-vm.yaml
1 Description: All-in-one baremetal OpenStack and all dependencies.
2 HeatTemplateFormatVersion: '2012-12-12'
3 Parameters:
4   AdminPassword:
5     Default: unset
6     Description: The password for the keystone admin account, used for monitoring, querying neutron etc.
7     Type: String
8   AdminToken:
9     Default: unset
10     Description: The keystone auth secret.
11     Type: String
12   Flavor:
13     Default: baremetal
14     Description: Flavor to request when deploying.
15     Type: String
16   GlancePassword:
17     Default: unset
18     Description: The password for the glance service account, used by the glance services.
19     Type: String
20   KeyName:
21     Default: default
22     Description: Name of an existing EC2 KeyPair to enable SSH access to the instances
23     Type: String
24   Image:
25     Default: undercloud
26     Type: String
27   NeutronPassword:
28     Default: unset
29     Description: The password for the neutron service account, used by neutron agents.
30     Type: String
31   NovaPassword:
32     Default: unset
33     Description: The password for the nova service account, used by nova-api.
34     Type: String
35   PowerUserName:
36     Default: stack
37     Description: What username to ssh to the virtual power host with.
38     Type: String
39 Resources:
40   AccessPolicy:
41     Properties:
42       AllowedResources:
43       - notcomputeConfig
44     Type: OS::Heat::AccessPolicy
45   Key:
46     Properties:
47       UserName:
48         Ref: User
49     Type: AWS::IAM::AccessKey
50   User:
51     Properties:
52       Policies:
53       - Ref: AccessPolicy
54     Type: AWS::IAM::User
55   notcomputeConfig:
56     Type: AWS::AutoScaling::LaunchConfiguration
57     Properties:
58       ImageId: '0'
59       InstanceType: foo
60     Metadata:
61       OpenStack::Heat::Stack: {}
62       Openstack::ImageBuilder::Elements: [ boot-stack, heat-cfntools, neutron-network-node ]
63       admin-password:
64         Ref: AdminPassword
65       admin-token: 
66         Ref: AdminToken
67       controller-address:
68         Fn::GetAtt:
69           - notcompute
70           - PrivateIp
71       cinder:
72         db: mysql://cinder:unset@localhost/cinder
73         volume_size_mb: '5000'
74       db-password: unset
75       glance:
76         db: mysql://glance:unset@localhost/glance
77         host: 127.0.0.1
78         service-password:
79           Ref: GlancePassword
80       heat:
81         admin_password: unset
82         admin_tenant_name: service
83         admin_user: heat
84         auth_encryption_key: unset___________
85         db: mysql://heat:unset@localhost/heat
86         heat_watch_server_url:
87           Fn::Join:
88             - ''
89             - - http://
90               - {"Fn::GetAtt": [ notcompute, PrivateIp ]}
91               - ":8003"
92         metadata_server_url:
93           Fn::Join:
94             - ''
95             - - http://
96               - {"Fn::GetAtt": [ notcompute, PrivateIp ]}
97               - ":8000"
98         waitcondition_server_url:
99           Fn::Join:
100             - ''
101             - - http://
102               - {"Fn::GetAtt": [ notcompute, PrivateIp ]}
103               - ":8000/v1/waitcondition"
104       os-collect-config:
105         cfn:
106           access_key_id:
107             Ref: Key
108           path: notcomputeConfig.Metadata
109           secret_access_key:
110             Fn::GetAtt:
111             - Key
112             - SecretAccessKey
113           stack_name:
114             Ref: AWS::StackName
115       interfaces:
116         control: eth2
117       keystone:
118         db: mysql://keystone:unset@localhost/keystone
119         host: 127.0.0.1
120       nova:
121         compute_hostname: ubuntu
122         compute_driver: baremetal.driver.BareMetalDriver
123         db: mysql://nova:unset@localhost/nova
124         host: 127.0.0.1
125         metadata-proxy: false
126         tuning:
127           ram_allocation_ratio: 1.0
128           reserved_host_memory_mb: 0
129         baremetal:
130           arch: i386
131           db: mysql://nova:unset@localhost/nova_bm
132           power_manager: nova.virt.baremetal.virtual_power_driver.VirtualPowerManager
133           pxe_deploy_timeout: 2400
134           virtual_power:
135             user:
136               Ref: PowerUserName
137             key: /opt/stack/boot-stack/virtual-power-key
138             ssh_host: 192.168.122.1
139             type: virsh
140         service-password:
141           Ref: NovaPassword
142       neutron:
143         host: 127.0.0.1
144         ovs_db: mysql://neutron:unset@localhost/ovs_neutron?charset=utf8
145         ovs:
146           dnsmasq_range: [192.0.2.25, 192.0.2.44]
147           public_interface: eth0
148           physical_bridge: br-ctlplane
149           physical_network: ctlplane
150           network_vlan_ranges: ctlplane
151           bridge_mappings: ctlplane:br-ctlplane
152           tenant_network_type: vlan
153           enable_tunneling: 'False'
154         service-password:
155           Ref: NeutronPassword
156       rabbit:
157         host: 127.0.0.1
158         password: guest
159       swift:
160         store_user: unset
161         store_key: unset
162   notcompute:
163     Type: OS::Nova::Server
164     Properties:
165       image:
166         Ref: Image
167       flavor:
168         Ref: Flavor
169       key_name:
170         Ref: KeyName
171     Metadata:
172       os-collect-config:
173         cfn:
174           access_key_id:
175             Ref: Key
176           path: notcomputeConfig.Metadata
177           secret_access_key:
178             Fn::GetAtt:
179             - Key
180             - SecretAccessKey
181           stack_name:
182             Ref: AWS::StackName