1 tosca_definitions_version: tosca_simple_yaml_1_0_0
5 ContrailComputeGlobalTypes:
6 file: ContrailComputeGlobalTypesServiceTemplate.yaml
7 CinderVolumeGlobalTypes:
8 file: CinderVolumeGlobalTypesServiceTemplate.yaml
9 ContrailVirtualNetworkGlobalType:
10 file: ContrailVirtualNetworkGlobalTypeServiceTemplate.yaml
11 AbstractSubstituteGlobalTypes:
12 file: AbstractSubstituteGlobalTypesServiceTemplate.yaml
13 ContrailPortGlobalTypes:
14 file: ContrailPortGlobalTypesServiceTemplate.yaml
15 GlobalSubstitutionTypes:
16 file: GlobalSubstitutionTypesServiceTemplate.yaml
17 NeutronPortGlobalTypes:
18 file: NeutronPortGlobalTypesServiceTemplate.yaml
19 NeutronNetGlobalTypes:
20 file: NeutronNetGlobalTypesServiceTemplate.yaml
22 file: CommonGlobalTypesServiceTemplate.yaml
23 ContrailAbstractSubstituteGlobalTypes:
24 file: ContrailAbstractSubstituteGlobalTypesServiceTemplate.yaml
25 ContrailNetworkRuleGlobalType:
26 file: ContrailNetworkRuleGlobalTypeServiceTemplate.yaml
27 NeutronSecurityRulesGlobalTypes:
28 file: NeutronSecurityRulesGlobalTypesServiceTemplate.yaml
29 NovaServerGlobalTypes:
30 file: NovaServerGlobalTypesServiceTemplate.yaml
31 ContrailV2VirtualMachineInterfaceGlobalType:
32 file: ContrailV2VirtualMachineInterfaceGlobalTypeServiceTemplate.yaml
39 description: Policy Name
40 st_static_routes_list:
44 description: List of static routes enabled-disabled
49 description: service type
50 st_service_interface_type_list:
54 description: List of interface types
59 description: service mode
60 Cricket_OCS_protected_net_id:
64 description: Name of Cricket OCS network
69 description: Name of OAM network
74 description: Start of dst port
84 description: availability zone
85 service_instance_name:
89 description: Service instance name
94 description: Indicates whether service scaling is enabled
99 description: maximum number of firewall instances for scaling
104 description: Start of src port
105 service_policy_direction:
109 description: Direction of Policy
114 description: Name of service template
118 HSL_direct_net_gateway:
122 description: HSL (Logging) network gateway address
127 description: Name of the image
132 description: List of shared ip enabled-disabled
137 Cricket_OCS_direct_net_id:
141 description: Name of Cricket OCS network
146 description: Name of OAM network
155 description: End of src port
164 description: End of dst port
169 description: Name of the image
174 description: Name of HSL (Logging) network
179 description: HSL (Logging) network address (CIDR notation)
182 type: org.openecomp.resource.abstract.nodes.heat.service_template_1
189 get_input: availability_zone_1
192 service_template_filter:
193 substitute_service_template: service_instance_1ServiceTemplate.yaml
195 get_input: max_num_fw_instances
196 scaling_enabled: false
202 - get_input: st_static_routes_list
206 - get_input: st_static_routes_list
210 - get_input: st_static_routes_list
214 - get_input: st_static_routes_list
217 service_template_name:
219 service_interface_type_list:
221 - management,left,right,other
225 - management,left,right,other
229 - management,left,right,other
233 - management,left,right,other
238 get_input: oam_mgmt_net_0_id
240 get_input: Cricket_OCS_direct_net_id
241 - virtual_network: hsl_direct_net
250 get_input: oam_mgmt_net_1_id
251 service_instance_name:
252 get_input: service_instance_name
257 - get_input: st_shared_ip_list
261 - get_input: st_shared_ip_list
265 - get_input: st_shared_ip_list
269 - get_input: st_shared_ip_list
274 capability: tosca.capabilities.network.Linkable
276 relationship: tosca.relationships.network.LinksTo
278 capability: tosca.capabilities.Node
280 relationship: tosca.relationships.DependsOn
282 type: org.openecomp.resource.abstract.nodes.heat.service_template_2
289 get_input: availability_zone_1
291 get_input: st_image_name
292 service_template_filter:
293 substitute_service_template: service_instance_2ServiceTemplate.yaml
300 - get_input: st_static_routes_list
304 - get_input: st_static_routes_list
307 service_template_name:
309 service_interface_type_list:
311 - get_input: st_service_interface_type_list
315 - get_input: st_service_interface_type_list
320 get_input: oam_mgmt_net_0_id
322 get_input: Cricket_OCS_direct_net_id
323 service_instance_name:
324 get_input: service_instance_name
329 - get_input: st_shared_ip_list
333 - get_input: st_shared_ip_list
338 capability: tosca.capabilities.Node
340 relationship: tosca.relationships.DependsOn
342 type: org.openecomp.resource.vl.nodes.heat.network.contrail.VirtualNetwork
345 get_input: HSL_direct_net_id
349 get_input: HSL_direct_net_cidr
351 get_input: HSL_direct_net_gateway
353 type: org.openecomp.resource.vfc.rules.nodes.heat.network.contrail.NetworkRules
359 get_input: start_src_ports
361 get_input: end_src_ports
366 - service_instance_name
372 get_input: Cricket_OCS_direct_net_id
375 get_input: start_dst_ports
377 get_input: end_dst_ports
380 get_input: Cricket_OCS_protected_net_id
382 get_input: service_policy_direction
384 get_input: service_policy_name
387 capability: tosca.capabilities.Node
388 node: service_instance_1
389 relationship: tosca.relationships.DependsOn
392 type: org.openecomp.groups.heat.HeatStack
394 heat_file: ../Artifacts/OCS-fw.yml
396 Based on the following reference for the HOT-DMZ-FW template: Version 3.5 8-10-2015 (Authors: Art Mishurov,am254u & Johhny Chen, jc3066) - HOT-DMZ-FW template that creates two DMZ networks (direct and protected) with a scaled out firewall service between the two.