1 heat_template_version: 2013-05-23
3 #################################
5 # Changes from MSO - 11/5/2015
6 # - Parameter changes as below
7 # - CDLs for vmNames, IPs
8 # - aZone->availability_zone_0
9 # - nwName->{nwRole}_net_name
10 # - nwID->{nwRole}_net_id
11 # - vmName->{vmType}_names
12 # - ips ->{vmType}_{nwRole}_ips
13 # - fips->{vmType}_{nwRole}_floating_ip
14 # - added replacement_policy: AUTO to all ports
15 # - added vnf_id for metadata to all servers
16 # - externalized security group resource
17 # - externalized eca_mgmt network
19 #################################
22 HOT template that creates Security Group and ECA network
27 label: eca management name
28 description: eca management name
31 label: eca management start
32 description: eca management start
35 label: eca management end
36 description: eca management end
39 label: eca management cidr
40 description: eca management cidr
43 label: ECA mgmt network subnet mask
44 description: ECA mgmt network subnet mask
47 label: MMSC security group name
48 description: MMSC security group name
52 type: OS::Neutron::SecurityGroup
54 description: mmsc security group
55 name: {get_param: security_group_name}
56 rules: [{"direction": egress, "ethertype": IPv4, "port_range_min": 1, "port_range_max": 65535, "protocol": tcp, "remote_ip_prefix": 0.0.0.0/0},
57 {"direction": egress, "ethertype": IPv4, "port_range_min": 1, "port_range_max": 65535, "protocol": udp, "remote_ip_prefix": 0.0.0.0/0},
58 {"direction": egress, "ethertype": IPv4, "protocol": icmp, "remote_ip_prefix": 0.0.0.0/0},
59 {"direction": ingress, "ethertype": IPv4, "port_range_min": 1, "port_range_max": 65535, "protocol": tcp, "remote_ip_prefix": 0.0.0.0/0},
60 {"direction": ingress, "ethertype": IPv4, "port_range_min": 1, "port_range_max": 65535, "protocol": udp, "remote_ip_prefix": 0.0.0.0/0},
61 {"direction": ingress, "ethertype": IPv4, "protocol": icmp, "remote_ip_prefix": 0.0.0.0/0}
64 type: OS::Contrail::VirtualNetwork
66 name: {get_param: eca_mgmt_name}
68 eca_mgmt_network_ip_subnet:
69 type: OS::Neutron::Subnet
71 name: {get_param: eca_mgmt_name}
72 allocation_pools: [{"start": {get_param: eca_mgmt_start}, "end": {get_param: eca_mgmt_end}}]
73 cidr: {get_param: eca_mgmt_cidr}
76 network_id: {get_resource: eca_mgmt_net}