summaryrefslogtreecommitdiffstats
path: root/notcompute.yaml
blob: a97f4d7c49bf6e4b6986ec222da42f7f9f6703e1 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
Description: Dedicated RabbitMQ Server,Dedicated MySQL server,Nova API,Keystone,Heat
  Engine and API,Glance
HeatTemplateFormatVersion: '2012-12-12'
Outputs:
  GlancePassword:
    Fn::GetAtt:
    - GlancePassword
    - Data
  GlanceUser:
    Ref: GlanceUser
  HeatPassword:
    Fn::GetAtt:
    - HeatPassword
    - Data
  HeatUser:
    Ref: HeatUser
  KeystonePassword:
    Fn::GetAtt:
    - KeystonePassword
    - Data
  KeystoneUser:
    Ref: KeystoneUser
  MySQLHost:
    Fn::GetAtt:
    - notcompute
    - PrivateIp
  RabbitMQHost:
    Fn::GetAtt:
    - notcompute
    - PrivateIp
  RabbitMQPassword:
    Fn::GetAtt:
    - RabbitMQPassword
    - Data
Parameters:
  AdminToken:
    Type: String
  BootstrapDumpPassword:
    Default: ''
    Description: Password to use for mysqldump from Bootstrap Host
    Type: String
  BootstrapHost:
    Default: ''
    Description: Load mysqldump from this Host
    Type: String
  BootstrapRootPassword:
    Default: ''
    Description: Root password for localhost access after bootstrap
    Type: String
  BootstrapSlavePassword:
    Default: ''
    Description: Password to use with BootstrapSlaveUser
    Type: String
  BootstrapSlaveUser:
    Default: ''
    Description: User to use for replication from bootstrap host
    Type: String
  GlanceDSN:
    Description: DSN for connecting to glance database
    Type: String
  GlanceUser:
    Default: heat
    Description: Glance database username.
    Type: String
  HeatUser:
    Default: heat
    Description: Heat database username.
    Type: String
  InstanceType:
    Default: bm.small
    Description: Use this flavor
    Type: String
  KeyName:
    Default: default
    Description: Name of an existing EC2 KeyPair to enable SSH access to the instances
    Type: String
  KeystoneDSN:
    Description: DSN for connecting to keystone
    Type: String
  KeystoneHost:
    Type: String
  KeystoneUser:
    Default: keystone
    Description: Keystone database username.
    Type: String
  NovaAPiSize:
    Default: 1
    Type: Integer
  NovaDSN:
    Description: DSN for connecting to nova database
    Type: String
  NovaInterfaces:
    Default: eth0
    Type: String
  RabbitHost:
    Type: String
  RabbitMQHost:
    Description: Host for RabbitMQ
    Type: String
  RabbitMQPassword:
    Description: Password for RabbitMQ
    Type: String
  RabbitPassword:
    Type: String
  ServicePassword:
    Description: admin_password for setting up auth in nova.
    Type: String
  TemplateURL:
    Default: https://raw.github.com/openstack-ops/templates/master/
    Type: String
  notcomputeImage:
    Type: String
Resources:
  AccessPolicy:
    Properties:
      AllowedResources:
      - notcompute
    Type: OS::Heat::AccessPolicy
  ApiAccessPolicy:
    Properties:
      AllowedResources:
      - notcompute
    Type: OS::Heat::AccessPolicy
  ApiKey:
    Properties:
      UserName:
        Ref: ApiUser
    Type: AWS::IAM::AccessKey
  ApiUser:
    Properties:
      Policies:
      - Ref: ApiAccessPolicy
    Type: AWS::IAM::User
  GlancePassword:
    DependsOn: notcompute
    Properties:
      Handle:
        Ref: GlancePasswordHandle
      Timeout: 90
    Type: AWS::CloudFormation::WaitCondition
  GlancePasswordHandle:
    Type: AWS::CloudFormation::WaitConditionHandle
  HeatAccessPolicy:
    Properties:
      AllowedResources:
      - notcompute
    Type: OS::Heat::AccessPolicy
  HeatKey:
    Properties:
      UserName:
        Ref: HeatUser
    Type: AWS::IAM::AccessKey
  HeatPassword:
    DependsOn: notcompute
    Properties:
      Handle:
        Ref: HeatPasswordHandle
      Timeout: 90
    Type: AWS::CloudFormation::WaitCondition
  HeatPasswordHandle:
    Type: AWS::CloudFormation::WaitConditionHandle
  HeatUser:
    Properties:
      Policies:
      - Ref: HeatAccessPolicy
    Type: AWS::IAM::User
  Key:
    Properties:
      UserName:
        Ref: User
    Type: AWS::IAM::AccessKey
  KeystonePassword:
    DependsOn: notcompute
    Properties:
      Handle:
        Ref: KeystonePasswordHandle
      Timeout: 90
    Type: AWS::CloudFormation::WaitCondition
  KeystonePasswordHandle:
    Type: AWS::CloudFormation::WaitConditionHandle
  RabbitMQPassword:
    DependsOn: notcompute
    Properties:
      Handle:
        Ref: RabbitMQPasswordHandle
      Timeout: 60
    Type: AWS::CloudFormation::WaitCondition
  RabbitMQPasswordHandle:
    Type: AWS::CloudFormation::WaitConditionHandle
  User:
    Properties:
      Policies:
      - Ref: AccessPolicy
    Type: AWS::IAM::User
  notcompute:
    Metadata:
      OpenStack::ImageBuilder::Elements:
      - rabbitmq-server
      - mysql-migration
      - nova-api
      - keystone
      - heat-api
      - heat-engine
      - glance
      OpenStack::Role: stateful
      admin-password:
        Ref: ServicePassword
      admin-token:
        Ref: AdminToken
      glance:
        db:
          Ref: GlanceDSN
      heat:
        access_key_id:
          Ref: ApiKey
        refresh:
        - resource: MySQL
        secret_key:
          Fn::GetAtt:
          - ApiKey
          - SecretAccessKey
        stack:
          name:
            Ref: AWS::StackName
          region:
            Ref: AWS::Region
      interfaces:
        control:
          Ref: NovaInterfaces
      keystone:
        host:
          Ref: KeystoneHost
      mysql:
        create-users:
        - database: keystone
          userhandle:
            Ref: KeystonePasswordHandle
          username:
            Ref: KeystoneUser
        - database: heat
          userhandle:
            Ref: HeatPasswordHandle
          username:
            Ref: HeatUser
        - database: glance
          userhandle:
            Ref: GlancePasswordHandle
          username:
            Ref: GlanceUser
      mysql-migration:
        bootstrap_host:
          Ref: BootstrapHost
        slave_password:
          Ref: BootstrapSlavePassword
        slave_user:
          Ref: BootstrapSlaveUser
        users:
          dump:
            password:
              Ref: BootstrapDumpPassword
            username: dump
          root:
            password:
              Ref: BootstrapRootPassword
            username: root
      nova:
        db:
          Ref: NovaDSN
      quantum:
        host:
          Ref: QuantumHost
      rabbit:
        host:
          Ref: RabbitHost
        password:
          Ref: RabbitPassword
      rabbitmq:
        password_handle:
          Ref: RabbitMQPasswordHandle
      service-password:
        Ref: ServicePassword
      swift:
        store_key: ''
        store_user: ''
    Properties:
      ImageId:
        Ref: notcomputeImage
      InstanceType:
        Ref: InstanceType
      KeyName:
        Ref: KeyName
    Type: AWS::EC2::Instance