python merge.py $< > $@.tmp
        mv $@.tmp $@
 
+undercloud-vm-tuskar.yaml: undercloud-vm.yaml tuskar-source.yaml
+       python merge.py $^ > $@.tmp
+       mv $@.tmp $@
+
 test:
        @bash test_merge.bash
 
--- /dev/null
+Parameters:
+  # NOTE(rpodolyaka): limitation of tuskar-api, see https://bugs.launchpad.net/tuskar/+bug/1235236
+  OvercloudAdminPassword:
+    Default: unset
+    Description: The password of admin user of the overcloud (required by some services in the under cloud)
+    Type: String
+  OvercloudKeystoneHost:
+    Description: The Overcloud Host running Keystone
+    Type: String
+Resources:
+  undercloudTuskarVm:
+    Type: AWS::AutoScaling::LaunchConfiguration
+    Metadata:
+      OpenStack::Role: notcomputeConfig
+      tuskar:
+        db: mysql://tuskar:unset@localhost/tuskar?charset=utf8
+        user: admin
+        tenant_name: admin
+        password: {Ref: AdminPassword}
+        overcloud-admin-password: {Ref: OvercloudAdminPassword}
+        overcloud-keystone-host: {Ref: OvercloudKeystoneHost}
 
       ImageId: '0'
       InstanceType: foo
     Metadata:
+      OpenStack::Role: notcomputeConfig
       OpenStack::Heat::Stack: {}
       Openstack::ImageBuilder::Elements: [ boot-stack, heat-cfntools, neutron-network-node ]
       admin-password: