blob: 758778d8cc4d5114c5deabc33dfea95dbe53c5af (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
|
Description: Nova API,Keystone,Heat Engine and API,Glance,Neutron,Dedicated MySQL
server,Dedicated RabbitMQ Server
HeatTemplateFormatVersion: '2012-12-12'
Parameters:
AdminToken:
Type: String
BootstrapDumpPassword:
Default: ''
Description: Password to use for mysqldump from Bootstrap Host
Type: String
NoEcho: true
BootstrapHost:
Default: ''
Description: Load mysqldump from this Host
Type: String
BootstrapRootPassword:
Default: ''
Description: Root password for localhost access after bootstrap
Type: String
NoEcho: true
BootstrapSlavePassword:
Default: ''
Description: Password to use with BootstrapSlaveUser
Type: String
NoEcho: true
BootstrapSlaveUser:
Default: ''
Description: User to use for replication from bootstrap host
Type: String
GlanceDBPassword:
Description: Password for connecting to glance database
Type: String
NoEcho: true
GlanceNotifierStrategy:
Description: Strategy to use for Glance notification queue
Type: String
Default: noop
GlanceLogFile:
Description: The filepath of the file to use for logging messages from Glance.
Type: String
Default: ''
HeatDBPassword:
Description: Password for accessing Heat database.
Type: String
NoEcho: true
InstanceType:
Default: baremetal
Description: Use this flavor
Type: String
KeyName:
Default: default
Description: Name of an existing EC2 KeyPair to enable SSH access to the instances
Type: String
KeystoneDBPassword:
Description: Password for connecting to keystone
Type: String
NoEcho: true
NovaDBPassword:
Description: Password for connecting to nova database
Type: String
NoEcho: true
NovaInterfaces:
Default: eth0
Type: String
NeutronDBPassword:
Description: Password for connecting to neutron database
Type: String
NoEcho: true
NeutronInterfaces:
Default: eth0
Type: String
RabbitMQPassword:
Description: Password for RabbitMQ
Type: String
NoEcho: true
RabbitUserName:
Type: String
RabbitPassword:
Type: String
NoEcho: true
ServicePassword:
Description: admin_password for setting up auth in nova.
Type: String
NoEcho: true
controllerImage:
Type: String
HeatStackDomainAdminPassword:
Description: Password for heat_domain_admin user.
Type: String
Default: ''
NoEcho: true
Resources:
AccessPolicy:
Properties:
AllowedResources:
- controller0
Type: OS::Heat::AccessPolicy
controller0Key:
Properties:
UserName:
Ref: User
Type: AWS::IAM::AccessKey
User:
Properties:
Policies:
- Ref: AccessPolicy
Type: AWS::IAM::User
controller0:
Metadata:
OpenStack::ImageBuilder::Elements:
- nova-api
- keystone
- heat-api
- heat-engine
- glance
- mysql-migration
- rabbitmq-server
admin-password:
Ref: ServicePassword
admin-token:
Ref: AdminToken
mysql:
create-users:
- database: keystone
username: keystone
password: {Ref: KeystoneDBPassword}
- database: heat
username: heat
password: {Ref: HeatDBPassword}
- database: glance
username: glance
password: {Ref: GlanceDBPassword}
- database: nova
username: nova
password: {Ref: NovaDBPassword}
- database: neutron
username: neutron
password: {Ref: NeutronDBPassword}
glance:
db:
Fn::Join:
- ''
- - 'mysql://glance:'
- {Ref: GlanceDBPassword}
- '@127.0.0.1/glance'
notifier-strategy:
Ref: GlanceNotifierStrategy
log-file:
Ref: GlanceLogFile
heat:
db:
Fn::Join:
- ''
- - 'mysql://heat:'
- {Ref: HeatDBPassword}
- '@127.0.0.1/heat'
access_key_id:
Ref: controller0Key
refresh:
- resource: controller0
secret_key:
Fn::GetAtt:
- controller0Key
- SecretAccessKey
stack:
name:
Ref: AWS::StackName
region:
Ref: AWS::Region
auth_encryption_key: unset
stack_domain_admin_password: {Ref: HeatStackDomainAdminPassword}
interfaces:
control:
Ref: NovaInterfaces
keystone:
host:
'127.0.0.1'
db:
Fn::Join:
- ''
- - 'mysql://keystone:'
- {Ref: KeystoneDBPassword}
- '@127.0.0.1/keystone'
nova:
db:
Fn::Join:
- ''
- - 'mysql://nova:'
- {Ref: NovaDBPassword}
- '@127.0.0.1/nova'
neutron:
host:
'127.0.0.1'
ovs_db:
Fn::Join:
- ''
- - 'mysql://neutron:'
- {Ref: NeutronDBPassword}
- '@127.0.0.1/ovs_neutron'
rabbit:
host:
'127.0.0.1'
username:
Ref: RabbitUserName
password:
Ref: RabbitPassword
users:
username:
Ref: RabbitUserName
password:
Ref: RabbitPassword
cookie:
Fn::GetAtt:
- RabbitCookie
- value
service-password:
Ref: ServicePassword
Properties:
ImageId:
Ref: controllerImage
InstanceType:
Ref: InstanceType
KeyName:
Ref: KeyName
Type: AWS::EC2::Instance
|
