prototypes/puppet-infracloud/manifests/site.pp

   1 # SPDX-license-identifier: Apache-2.0
   2 ##############################################################################
   3 # Copyright (c) 2016 RedHat and others.
   4 # All rights reserved. This program and the accompanying materials
   5 # are made available under the terms of the Apache License, Version 2.0
   6 # which accompanies this distribution, and is available at
   7 # http://www.apache.org/licenses/LICENSE-2.0
   8 ##############################################################################
   9 node 'controller00.opnfvlocal' {
  10   $group = 'infracloud'
  11   include ::sudoers
  12
  13   class { 'opnfv::server':
  14     iptables_public_tcp_ports => [80,5000,5671,8774,9292,9696,35357], # logs,keystone,rabbit,nova,glance,neutron,keystone
  15     sysadmins                 => hiera('sysadmins', []),
  16     enable_unbound            => false,
  17     purge_apt_sources         => false,
  18   }
  19   class { 'opnfv::controller':
  20     keystone_rabbit_password         => hiera('keystone_rabbit_password'),
  21     neutron_rabbit_password          => hiera('neutron_rabbit_password'),
  22     nova_rabbit_password             => hiera('nova_rabbit_password'),
  23     root_mysql_password              => hiera('infracloud_mysql_password'),
  24     keystone_mysql_password          => hiera('keystone_mysql_password'),
  25     glance_mysql_password            => hiera('glance_mysql_password'),
  26     neutron_mysql_password           => hiera('neutron_mysql_password'),
  27     nova_mysql_password              => hiera('nova_mysql_password'),
  28     keystone_admin_password          => hiera('keystone_admin_password'),
  29     glance_admin_password            => hiera('glance_admin_password'),
  30     neutron_admin_password           => hiera('neutron_admin_password'),
  31     nova_admin_password              => hiera('nova_admin_password'),
  32     keystone_admin_token             => hiera('keystone_admin_token'),
  33     ssl_key_file_contents            => hiera('ssl_key_file_contents'),
  34     ssl_cert_file_contents           => hiera('ssl_cert_file_contents'),
  35     br_name                          => hiera('bridge_name'),
  36     controller_public_address        => $::fqdn,
  37     neutron_subnet_cidr              => '192.168.122.0/24',
  38     neutron_subnet_gateway           => '192.168.122.1',
  39     neutron_subnet_allocation_pools  => [
  40                                           'start=192.168.122.50,end=192.168.122.254',
  41                                         ],
  42     opnfv_password                   => hiera('opnfv_password'),
  43   }
  44 }
  45
  46 node 'compute00.opnfvlocal' {
  47   $group = 'infracloud'
  48   include ::sudoers
  49
  50   class { 'opnfv::server':
  51     sysadmins                 => hiera('sysadmins', []),
  52     enable_unbound            => false,
  53     purge_apt_sources         => false,
  54   }
  55
  56   class { 'opnfv::compute':
  57     nova_rabbit_password             => hiera('nova_rabbit_password'),
  58     neutron_rabbit_password          => hiera('neutron_rabbit_password'),
  59     neutron_admin_password           => hiera('neutron_admin_password'),
  60     ssl_cert_file_contents           => hiera('ssl_cert_file_contents'),
  61     ssl_key_file_contents            => hiera('ssl_key_file_contents'),
  62     br_name                          => hiera('bridge_name'),
  63     controller_public_address        => 'controller00.opnfvlocal',
  64     virt_type                        => 'qemu',
  65   }
  66 }
  67
  68 node 'jumphost.opnfvlocal' {
  69   class { 'opnfv::server':
  70     sysadmins                 => hiera('sysadmins', []),
  71     enable_unbound            => false,
  72     purge_apt_sources         => false,
  73   }
  74 }
  75
  76 node 'baremetal.opnfvlocal' {
  77   class { '::opnfv::server':
  78     iptables_public_udp_ports => [67, 69],
  79     sysadmins                 => hiera('sysadmins', []),
  80     enable_unbound            => false,
  81     purge_apt_sources         => false,
  82   }
  83
  84   class { '::infracloud::bifrost':
  85     ironic_inventory          => hiera('ironic_inventory', {}),
  86     ironic_db_password        => hiera('ironic_db_password'),
  87     mysql_password            => hiera('bifrost_mysql_password'),
  88     ipmi_passwords            => hiera('ipmi_passwords'),
  89     ssh_private_key           => hiera('bifrost_ssh_private_key'),
  90     ssh_public_key            => hiera('bifrost_ssh_public_key'),
  91     vlan                      => hiera('infracloud_vlan'),
  92     gateway_ip                => hiera('infracloud_gateway_ip'),
  93     default_network_interface => hiera('default_network_interface'),
  94     dhcp_pool_start           => hiera('dhcp_pool_start'),
  95     dhcp_pool_end             => hiera('dhcp_pool_end'),
  96     network_interface         => hiera('network_interface'),
  97     ipv4_nameserver           => hiera('ipv4_nameserver'),
  98     ipv4_subnet_mask          => hiera('ipv4_subnet_mask'),
  99   }
 100 }