This makes it possible to have SSL connections to APIs from compute
hosts with no DNS or external connectivity - something the
ci-overcloud has.
Change-Id: I089ef8fdfb4a59279f09bf3cd2a4474000e4bfa6
     Type: String
   NeutronEnableTunnelling:
     Type: String
+  StaticHosts:
+    Default: ''
+    Description: Static content to append to /etc/hosts
+    Type: String
 Resources:
   ComputeAccessPolicy:
     Type: OS::Heat::AccessPolicy
         compute_agent: {Ref: CeilometerComputeAgent}
       glance:
         host: {Ref: GlanceHost}
+      hosts: {Ref: StaticHosts}
       keystone:
         host: {Ref: KeystoneHost}
       neutron:
 
     Description: The password for the ceilometer service account.
     Type: String
     NoEcho: true
+  CloudName:
+    Default: ''
+    Description: The DNS name of this cloud. E.g. ci-overcloud.tripleo.org
+    Type: String
   NovaComputeDriver:
     Default: libvirt.LibvirtDriver
     Type: String
   NtpServer:
     Type: String
     Default: ''
+  StaticHosts:
+    Default:
+      Fn::Join:
+      - ' '
+      - - Fn::Select:
+          - 0
+          - Fn::Select:
+            - ctlplane
+            - Fn::GetAtt:
+              - notCompute0
+              - networks
+        - {Ref: CloudName}
+    Description: Static content to append to /etc/hosts
+    Type: String
 Resources:
   AccessPolicy:
     Properties:
         NeutronBridgeMappings:
             Ref: NeutronBridgeMappings
         RabbitPassword: "guest"
+        StaticHosts:
+            Ref: StaticHosts
   NovaCompute0:
     Type: FileInclude
     Path: nova-compute-instance.yaml
                     - notCompute0
                     - networks
               - ':8000/v1/waitcondition'
+      hosts: {Ref: StaticHosts}
       keystone:
         db: mysql://keystone:unset@localhost/keystone
         host: