1 tosca_definitions_version: tosca_simple_yaml_1_0_0
5 ContrailComputeGlobalTypes:
6 file: ContrailComputeGlobalTypesServiceTemplate.yaml
7 CinderVolumeGlobalTypes:
8 file: CinderVolumeGlobalTypesServiceTemplate.yaml
9 ContrailVirtualNetworkGlobalType:
10 file: ContrailVirtualNetworkGlobalTypeServiceTemplate.yaml
11 AbstractSubstituteGlobalTypes:
12 file: AbstractSubstituteGlobalTypesServiceTemplate.yaml
13 ContrailPortGlobalTypes:
14 file: ContrailPortGlobalTypesServiceTemplate.yaml
15 GlobalSubstitutionTypes:
16 file: GlobalSubstitutionTypesServiceTemplate.yaml
17 NeutronPortGlobalTypes:
18 file: NeutronPortGlobalTypesServiceTemplate.yaml
19 NeutronNetGlobalTypes:
20 file: NeutronNetGlobalTypesServiceTemplate.yaml
22 file: CommonGlobalTypesServiceTemplate.yaml
23 ContrailAbstractSubstituteGlobalTypes:
24 file: ContrailAbstractSubstituteGlobalTypesServiceTemplate.yaml
25 ContrailNetworkRuleGlobalType:
26 file: ContrailNetworkRuleGlobalTypeServiceTemplate.yaml
27 NeutronSecurityRulesGlobalTypes:
28 file: NeutronSecurityRulesGlobalTypesServiceTemplate.yaml
29 NovaServerGlobalTypes:
30 file: NovaServerGlobalTypesServiceTemplate.yaml
31 ContrailV2VirtualMachineInterfaceGlobalType:
32 file: ContrailV2VirtualMachineInterfaceGlobalTypeServiceTemplate.yaml
39 description: Policy Name
40 st_static_routes_list:
44 description: List of static routes enabled-disabled
49 description: service type
50 st_service_interface_type_list:
54 description: List of interface types
59 description: service mode
60 Cricket_OCS_protected_net_id:
64 description: Name of Cricket OCS network
69 description: Name of OAM network
74 description: Start of dst port
84 description: availability zone
85 service_instance_name:
89 description: Service instance name
94 description: Indicates whether service scaling is enabled
99 description: maximum number of firewall instances for scaling
104 description: Start of src port
105 service_policy_direction:
109 description: Direction of Policy
114 description: Name of service template
115 HSL_direct_net_gateway:
119 description: HSL (Logging) network gateway address
124 description: Name of the image
129 description: List of shared ip enabled-disabled
134 Cricket_OCS_direct_net_id:
138 description: Name of Cricket OCS network
143 description: Name of OAM network
152 description: End of src port
161 description: End of dst port
166 description: Name of the image
171 description: Name of HSL (Logging) network
176 description: HSL (Logging) network address (CIDR notation)
179 type: org.openecomp.resource.abstract.nodes.heat.service_template
186 get_input: availability_zone_1
189 service_template_filter:
190 substitute_service_template: service_instance_1ServiceTemplate.yaml
193 get_input: st_scaling
199 - get_input: st_static_routes_list
203 - get_input: st_static_routes_list
207 - get_input: st_static_routes_list
211 - get_input: st_static_routes_list
214 service_template_name:
216 service_interface_type_list:
218 - management,left,right,other
222 - management,left,right,other
226 - management,left,right,other
230 - management,left,right,other
235 get_input: oam_mgmt_net_0_id
237 get_input: Cricket_OCS_direct_net_id
238 - virtual_network: hsl_direct_net1
247 get_input: oam_mgmt_net_1_id
248 service_instance_name:
249 get_input: service_instance_name
254 - get_input: st_shared_ip_list
258 - get_input: st_shared_ip_list
262 - get_input: st_shared_ip_list
266 - get_input: st_shared_ip_list
271 capability: tosca.capabilities.network.Linkable
272 node: hsl_direct_net1
273 relationship: tosca.relationships.network.LinksTo
275 capability: tosca.capabilities.Node
276 node: hsl_direct_net1
277 relationship: tosca.relationships.DependsOn
279 type: org.openecomp.resource.abstract.nodes.heat.service_template
286 get_input: availability_zone_1
289 service_template_filter:
290 substitute_service_template: service_instance_2ServiceTemplate.yaml
292 get_input: max_num_fw_instances
294 get_input: st_scaling
300 - get_input: st_static_routes_list
304 - get_input: st_static_routes_list
308 - get_input: st_static_routes_list
312 - get_input: st_static_routes_list
315 service_template_name:
317 service_interface_type_list:
319 - management,left,right,other
323 - management,left,right,other
327 - management,left,right,other
331 - management,left,right,other
336 get_input: oam_mgmt_net_0_id
338 get_input: Cricket_OCS_direct_net_id
339 - virtual_network: hsl_direct_net2
348 get_input: oam_mgmt_net_1_id
349 service_instance_name:
350 get_input: service_instance_name
355 - get_input: st_shared_ip_list
359 - get_input: st_shared_ip_list
363 - get_input: st_shared_ip_list
367 - get_input: st_shared_ip_list
372 capability: tosca.capabilities.network.Linkable
373 node: hsl_direct_net2
374 relationship: tosca.relationships.network.LinksTo
376 capability: tosca.capabilities.Node
377 node: hsl_direct_net1
378 relationship: tosca.relationships.DependsOn
380 type: org.openecomp.resource.vl.nodes.heat.network.contrail.VirtualNetwork
383 get_input: HSL_direct_net_id
387 get_input: HSL_direct_net_cidr
389 get_input: HSL_direct_net_gateway
391 type: org.openecomp.resource.vl.nodes.heat.network.contrail.VirtualNetwork
394 get_input: HSL_direct_net_id
396 type: org.openecomp.resource.vfc.rules.nodes.heat.network.contrail.NetworkRules
402 get_input: start_src_ports
404 get_input: end_src_ports
411 get_input: Cricket_OCS_direct_net_id
414 get_input: start_dst_ports
416 get_input: end_dst_ports
419 get_input: Cricket_OCS_protected_net_id
421 get_input: service_policy_direction
423 get_input: service_policy_name
426 capability: tosca.capabilities.Node
427 node: service_instance_1
428 relationship: tosca.relationships.DependsOn
431 type: org.openecomp.groups.heat.HeatStack
433 heat_file: ../Artifacts/OCS-fw.yml
435 Based on the following reference for the HOT-DMZ-FW template: Version 3.5 8-10-2015 (Authors: Art Mishurov,am254u & Johhny Chen, jc3066) - HOT-DMZ-FW template that creates two DMZ networks (direct and protected) with a scaled out firewall service between the two.