Make the keystone admin token configurable.
[apex-tripleo-heat-templates.git] / undercloud-vm.yaml
1 escription: All-in-one baremetal OpenStack and all dependencies.
2 HeatTemplateFormatVersion: '2012-12-12'
3 Parameters:
4   AdminToken:
5     Default: unset
6     Description: The keystone auth secret.
7     Type: String
8   InstanceType:
9     Default: baremetal
10     Description: Flavor to request when deploying.
11     Type: String
12   KeyName:
13     Default: default
14     Description: Name of an existing EC2 KeyPair to enable SSH access to the instances
15     Type: String
16   Image:
17     Default: undercloud
18     Type: String
19   PowerUserName:
20     Default: stack
21     Description: What username to ssh to the virtual power host with.
22     Type: String
23 Resources:
24   AccessPolicy:
25     Properties:
26       AllowedResources:
27       - notcomputeConfig
28     Type: OS::Heat::AccessPolicy
29   Key:
30     Properties:
31       UserName:
32         Ref: User
33     Type: AWS::IAM::AccessKey
34   User:
35     Properties:
36       Policies:
37       - Ref: AccessPolicy
38     Type: AWS::IAM::User
39   notcomputeConfig:
40     Type: AWS::AutoScaling::LaunchConfiguration
41     Properties:
42       ImageId: '0'
43       InstanceType: foo
44     Metadata:
45       OpenStack::Heat::Stack: {}
46       Openstack::ImageBuilder::Elements: [ boot-stack, heat-cfntools, neutron-network-node ]
47       admin-password: unset
48       admin-token:
49         Ref: AdminToken
50       controller-address:
51         Fn::GetAtt:
52           - notcompute
53           - PrivateIp
54       cinder:
55         db: mysql://cinder:unset@localhost/cinder
56         volume_size_mb: '5000'
57       db-password: unset
58       glance:
59         db: mysql://glance:unset@localhost/glance
60         host: 127.0.0.1
61       heat:
62         admin_password: unset
63         admin_tenant_name: service
64         admin_user: heat
65         auth_encryption_key: unset___________
66         db: mysql://heat:unset@localhost/heat
67         heat_watch_server_url:
68           Fn::Join:
69             - ''
70             - - http://
71               - {"Fn::GetAtt": [ notcompute, PrivateIp ]}
72               - ":8003"
73         metadata_server_url:
74           Fn::Join:
75             - ''
76             - - http://
77               - {"Fn::GetAtt": [ notcompute, PrivateIp ]}
78               - ":8000"
79         waitcondition_server_url:
80           Fn::Join:
81             - ''
82             - - http://
83               - {"Fn::GetAtt": [ notcompute, PrivateIp ]}
84               - ":8000/v1/waitcondition"
85       os-collect-config:
86         cfn:
87           access_key_id:
88             Ref: Key
89           path: notcomputeConfig.Metadata
90           secret_access_key:
91             Fn::GetAtt:
92             - Key
93             - SecretAccessKey
94           stack_name:
95             Ref: AWS::StackName
96       interfaces:
97         control: eth2
98       keystone:
99         db: mysql://keystone:unset@localhost/keystone
100         host: 127.0.0.1
101       nova:
102         compute_hostname: ubuntu
103         compute_driver: baremetal.driver.BareMetalDriver
104         db: mysql://nova:unset@localhost/nova
105         host: 127.0.0.1
106         metadata-proxy: false
107         tuning:
108           ram_allocation_ratio: 1.0
109           reserved_host_memory_mb: 0
110         baremetal:
111           arch: i386
112           db: mysql://nova:unset@localhost/nova_bm
113           power_manager: nova.virt.baremetal.virtual_power_driver.VirtualPowerManager
114           pxe_deploy_timeout: 2400
115           virtual_power:
116             user:
117               Ref: PowerUserName
118             key: /opt/stack/boot-stack/virtual-power-key
119             ssh_host: 192.168.122.1
120             type: virsh
121       neutron:
122         host: 127.0.0.1
123         ovs_db: mysql://neutron:unset@localhost/ovs_neutron?charset=utf8
124         ovs:
125           dnsmasq_range: [192.0.2.25, 192.0.2.44]
126           public_interface: eth0
127           physical_bridge: br-ctlplane
128           physical_network: ctlplane
129           network_vlan_ranges: ctlplane
130           bridge_mappings: ctlplane:br-ctlplane
131           tenant_network_type: vlan
132           enable_tunneling: 'False'
133       rabbit:
134         host: 127.0.0.1
135         password: guest
136       swift:
137         store_user: unset
138         store_key: unset
139       service-password: unset
140   notcompute:
141     Type: AWS::EC2::Instance
142     Properties:
143       ImageId:
144         Ref: Image
145       InstanceType:
146         Ref: InstanceType
147       KeyName:
148         Ref: KeyName
149     Type: AWS::EC2::Instance
150     Metadata:
151       os-collect-config:
152         cfn:
153           access_key_id:
154             Ref: Key
155           path: notcomputeConfig.Metadata
156           secret_access_key:
157             Fn::GetAtt:
158             - Key
159             - SecretAccessKey
160           stack_name:
161             Ref: AWS::StackName