1 tosca_definitions_version: tosca_simple_yaml_1_0_0
5 - openecomp_heat_index:
6 file: openecomp-heat/_index.yml
8 org.openecomp.resource.vfc.nodes.heat.cgi_fw:
9 derived_from: org.openecomp.resource.vfc.nodes.heat.nova.Server
16 description: Unique ID for this VF Module instance
17 default: dummy_vf_module_id
18 nimbus_hsl_interface_type:
22 description: service_interface_type for ServiceInstance
24 cgi_fw_pt_vlan_VM2_name_fqdn:
28 description: fqdn of the ServiceInstance in PortTuple Resource
31 cgi_fw_vmi_ecmp_src_ip:
35 description: source_ip for the VirtualMachineInterface
38 label: Firewall VM Name
42 description: Comma Delimited List of Names for ServiceInstance VMs
48 cgi_fw_vmi_ecmp_dst_ip:
52 description: destination_ip for the VirtualMachineInterface
54 sgi_direct_interface_type:
58 description: service_interface_type for ServiceInstance
64 description: Unique name for this VF instance
65 default: zrdm3firstnetfcgi02
70 description: flavor for the ServiceInstance VM
76 description: Unique name for this VF Module instance
82 description: service_type for the ServiceTemplate
84 sgi_protected_net_dummy_fqdn:
88 description: fq_name for the VirtualNetwork
89 default: default-domain:ALU-L3:firstnet_dummy_net_1
90 cgi_fw_vmi_ecmp_src_port:
94 description: source_port for the VirtualMachineInterface
96 sgi_protected_net_dummy1:
100 description: name for the VirtualNetwork
105 description: Unique ID for this VF instance
106 default: dummy_vnf_id
111 description: fq_name for the VirtualNetwork
112 default: default-domain:ALU-L3:fgi_direct
113 sgi_protected_interface_type:
117 description: service_interface_type for ServiceInstance
119 cgi_fw_vmi_ecmp_dst_port:
123 description: destination_port for the VirtualMachineInterface
125 sgi_direct_family_v6:
129 description: IP Family Address for InstanceIp
135 description: availability_zone for the ServiceInstance
141 description: availability_zone for the ServiceInstance
147 description: fq_name for the VirtualNetwork
148 default: default-domain:ALU-L3:alu-firstnet-net
149 sgi_protected_net_dummy:
153 description: name for the VirtualNetwork
154 default: firstnet_dummy_net_1
155 cgi_fw_pt_vlan_VM1_name_fqdn:
159 description: fqdn of the ServiceInstance in PortTuple Resource
162 cgi_fw_vmi_ecmp_configured:
166 description: hashing_configured for the VirtualMachineInterface
168 cgi_fw_vmi_ecmp_ip_protocol:
172 description: ip_protocol for the VirtualMachineInterface
174 oam_protected_net_fqdn:
178 description: fq_name for the VirtualNetwork
179 default: default-domain:ALU-L3:alu_l3_mt_net
180 oam_protected_interface_type:
184 description: service_interface_type for ServiceInstance
190 description: service_mode for the ServiceTemplate
191 default: in-network-nat
192 sgi_direct_ipv6_subnet_id:
196 description: Subnet UUID for InstanceIp
197 default: 4560666e-f306-4d7b-b0ec-a2d4330e9600
198 contrail_vmi_subinterface:
210 description: image_name for the ServiceInstance VM
211 default: F5_LB-FW_F5_12_1_HF1_Startup
212 cgi_fw_oam_protected_ips:
216 description: the ips of the management network for CGI FW
222 sgi_direct_subnet_id:
226 description: Subnet UUID for InstanceIp
227 default: 63858a9d-696b-4731-b3b3-7c8dfd777b9e
232 description: domain for the ServiceTemplate
233 default: default-domain
238 description: version for the ServiceTemplate
244 cgi_fw_st_virtualization_type:
248 description: service_virtualization_type for the ServiceTemplate
249 default: virtual-machine
250 subinterface_name_prefix:
255 CGI_FW_OAM_PROTECTED_RVMI_2:
256 type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
260 template: VM_NAME_vmi_1
268 virtual_network_refs:
269 - get_input: oam_protected_net_fqdn
270 virtual_machine_interface_properties:
271 service_interface_type:
272 get_input: oam_protected_interface_type
275 capability: tosca.capabilities.network.Bindable
276 node: CGI_FW_SERVER_2
277 relationship: tosca.relationships.network.BindsTo
278 CGI_FW_SGI_DIRECT_RVMI_1:
279 type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
283 template: VM_NAME_vmi_3
291 virtual_network_refs:
292 - get_input: sgi_direct_net_fqdn
293 virtual_machine_interface_properties:
294 service_interface_type:
295 get_input: sgi_direct_interface_type
297 get_input: cgi_fw_pt_vlan_VM1_name_fqdn
300 capability: tosca.capabilities.network.Bindable
301 node: CGI_FW_SERVER_1
302 relationship: tosca.relationships.network.BindsTo
303 CGI_FW_OAM_PROTECTED_RVMI_1:
304 type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
308 template: VM_NAME_vmi_1
316 virtual_network_refs:
317 - get_input: oam_protected_net_fqdn
318 virtual_machine_interface_properties:
319 service_interface_type:
320 get_input: oam_protected_interface_type
323 capability: tosca.capabilities.network.Bindable
324 node: CGI_FW_SERVER_1
325 relationship: tosca.relationships.network.BindsTo
326 CGI_FW_SGI_DIRECT_RVMI_2:
327 type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
331 template: VM_NAME_vmi_3
339 virtual_network_refs:
340 - get_input: sgi_direct_net_fqdn
341 virtual_machine_interface_properties:
342 service_interface_type:
343 get_input: sgi_direct_interface_type
345 get_input: cgi_fw_pt_vlan_VM2_name_fqdn
348 capability: tosca.capabilities.network.Bindable
349 node: CGI_FW_SERVER_2
350 relationship: tosca.relationships.network.BindsTo
351 CGI_FW_NIMBUS_HSL_RVMI_2:
352 type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
356 template: VM_NAME_vmi_4
364 virtual_network_refs:
365 - get_input: nimbus_hsl_net_fqdn
366 virtual_machine_interface_properties:
367 service_interface_type:
368 get_input: nimbus_hsl_interface_type
371 capability: tosca.capabilities.network.Bindable
372 node: CGI_FW_SERVER_2
373 relationship: tosca.relationships.network.BindsTo
374 CGI_FW_NIMBUS_HSL_RVMI_1:
375 type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
379 template: VM_NAME_vmi_4
387 virtual_network_refs:
388 - get_input: nimbus_hsl_net_fqdn
389 virtual_machine_interface_properties:
390 service_interface_type:
391 get_input: nimbus_hsl_interface_type
394 capability: tosca.capabilities.network.Bindable
395 node: CGI_FW_SERVER_1
396 relationship: tosca.relationships.network.BindsTo
398 type: org.openecomp.resource.vfc.nodes.heat.cgi_fw
401 get_input: cgi_fw_flavor_name
403 get_input: availability_zone_0
405 get_input: cgi_fw_image_name
408 get_input: vf_module_id
414 get_input: vf_module_name
415 contrail_service_instance_ind: true
421 group: CGI_FW_RAG_group
423 type: org.openecomp.resource.vfc.rules.nodes.heat.network.neutron.SecurityRules
427 template: VNF_NAME_sg_cgi_fw
431 description: Security Group of CGI FW ServiceInstance
435 remote_ip_prefix: 0.0.0.0/0
436 port_range_max: 65535
441 remote_ip_prefix: 0.0.0.0/0
442 port_range_max: 65535
447 remote_ip_prefix: 0.0.0.0/0
448 port_range_max: 65535
453 remote_ip_prefix: 0.0.0.0/0
457 remote_ip_prefix: ::/0
458 port_range_max: 65535
463 remote_ip_prefix: ::/0
464 port_range_max: 65535
469 remote_ip_prefix: ::/0
470 port_range_max: 65535
475 remote_ip_prefix: ::/0
479 remote_ip_prefix: 0.0.0.0/0
480 port_range_max: 65535
485 remote_ip_prefix: 0.0.0.0/0
486 port_range_max: 65535
491 remote_ip_prefix: 0.0.0.0/0
492 port_range_max: 65535
497 remote_ip_prefix: 0.0.0.0/0
501 remote_ip_prefix: ::/0
502 port_range_max: 65535
507 remote_ip_prefix: ::/0
508 port_range_max: 65535
513 remote_ip_prefix: ::/0
514 port_range_max: 65535
519 remote_ip_prefix: ::/0
521 CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2:
522 type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
526 template: VM_NAME_vmi_dummy
534 virtual_network_refs:
535 - get_input: sgi_protected_net_dummy_fqdn
538 capability: tosca.capabilities.network.Bindable
539 node: CGI_FW_SERVER_2
540 relationship: tosca.relationships.network.BindsTo
541 CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1:
542 type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
546 template: VM_NAME_vmi_dummy
554 virtual_network_refs:
555 - get_input: sgi_protected_net_dummy_fqdn
558 capability: tosca.capabilities.network.Bindable
559 node: CGI_FW_SERVER_1
560 relationship: tosca.relationships.network.BindsTo
562 type: org.openecomp.resource.vfc.nodes.heat.cgi_fw
565 get_input: cgi_fw_flavor_name
568 - contrail_vmi_subinterface
569 - virtual_machine_interface_allowed_address_pairs
570 - allowed_address_pair
572 get_input: cgi_fw_image_name
575 get_input: vf_module_id
581 get_input: vf_module_name
582 contrail_service_instance_ind: true
588 group: CGI_FW_RAG_group
589 contrail_vmi_subinterface:
590 type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
594 template: VM_NAME_PORT_3
597 get_input: vipr_atm_name_0
598 virtual_network_refs:
599 - get_input: oam_protected_net_fqdn
600 virtual_machine_interface_properties:
601 service_interface_type: left
603 - get_input: port_name
606 type: tosca.groups.Root
610 base_firstnet_fgi_frwl_group:
611 type: org.openecomp.groups.heat.HeatStack
613 heat_file: ../Artifacts/base_firstnet_fgi_frwl.yml
615 HOT template to create SecurityGroup//ServerGroup//ServiceTemplate:
617 - CGI_FW_OAM_PROTECTED_RVMI_2
618 - CGI_FW_SGI_DIRECT_RVMI_1
619 - CGI_FW_OAM_PROTECTED_RVMI_1
620 - CGI_FW_SGI_DIRECT_RVMI_2
621 - CGI_FW_NIMBUS_HSL_RVMI_2
622 - CGI_FW_NIMBUS_HSL_RVMI_1
625 - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
626 - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
628 - contrail_vmi_subinterface
631 type: org.openecomp.policies.placement.Antilocate
635 template: VNF_NAME_srg_cgi_fw