gerrit.onap Code Review - sdc.git/blob

   1 tosca_definitions_version: tosca_simple_yaml_1_0_0
   2 metadata:
   3   template_name: Main
   4 imports:
   5 - openecomp_heat_index:
   6     file: openecomp-heat/_index.yml
   7 node_types:
   8   org.openecomp.resource.vfc.nodes.heat.cgi_fw:
   9     derived_from: org.openecomp.resource.vfc.nodes.heat.nova.Server
  10 topology_template:
  11   inputs:
  12     vf_module_id:
  13       hidden: false
  14       immutable: false
  15       annotations:
  16         source:
  17           type: org.openecomp.annotations.Source
  18           properties:
  19             vf_module_label:
  20             - base_firstnet_fgi_frwl
  21             source_type: HEAT
  22             param_name: vf_module_id
  23       type: string
  24       description: Unique ID for this VF Module instance
  25       default: dummy_vf_module_id
  26     nimbus_hsl_interface_type:
  27       hidden: false
  28       immutable: false
  29       annotations:
  30         source:
  31           type: org.openecomp.annotations.Source
  32           properties:
  33             vf_module_label:
  34             - base_firstnet_fgi_frwl
  35             source_type: HEAT
  36             param_name: nimbus_hsl_interface_type
  37       type: string
  38       description: service_interface_type for ServiceInstance
  39       default: other
  40     cgi_fw_pt_vlan_VM2_name_fqdn:
  41       hidden: false
  42       immutable: false
  43       annotations:
  44         source:
  45           type: org.openecomp.annotations.Source
  46           properties:
  47             vf_module_label:
  48             - base_firstnet_fgi_frwl
  49             source_type: HEAT
  50             param_name: cgi_fw_pt_vlan_VM2_name_fqdn
  51       type: json
  52       description: fqdn of the ServiceInstance in PortTuple Resource
  53       default: [
  54         ]
  55     cgi_fw_vmi_ecmp_src_ip:
  56       hidden: false
  57       immutable: false
  58       annotations:
  59         source:
  60           type: org.openecomp.annotations.Source
  61           properties:
  62             vf_module_label:
  63             - base_firstnet_fgi_frwl
  64             source_type: HEAT
  65             param_name: cgi_fw_vmi_ecmp_src_ip
  66       type: boolean
  67       description: source_ip for the VirtualMachineInterface
  68       default: true
  69     cgi_fw_names:
  70       label: Firewall VM Name
  71       hidden: false
  72       immutable: false
  73       annotations:
  74         source:
  75           type: org.openecomp.annotations.Source
  76           properties:
  77             vf_module_label:
  78             - base_firstnet_fgi_frwl
  79             source_type: HEAT
  80             param_name: cgi_fw_names
  81       type: list
  82       description: Comma Delimited List of Names for ServiceInstance VMs
  83       default:
  84       - zsde1fcgi02fgi001
  85       - zsde1fcgi02fgi002
  86       entry_schema:
  87         type: string
  88     cgi_fw_vmi_ecmp_dst_ip:
  89       hidden: false
  90       immutable: false
  91       annotations:
  92         source:
  93           type: org.openecomp.annotations.Source
  94           properties:
  95             vf_module_label:
  96             - base_firstnet_fgi_frwl
  97             source_type: HEAT
  98             param_name: cgi_fw_vmi_ecmp_dst_ip
  99       type: boolean
 100       description: destination_ip for the VirtualMachineInterface
 101       default: true
 102     sgi_direct_interface_type:
 103       hidden: false
 104       immutable: false
 105       annotations:
 106         source:
 107           type: org.openecomp.annotations.Source
 108           properties:
 109             vf_module_label:
 110             - base_firstnet_fgi_frwl
 111             source_type: HEAT
 112             param_name: sgi_direct_interface_type
 113       type: string
 114       description: service_interface_type for ServiceInstance
 115       default: right
 116     vnf_name:
 117       hidden: false
 118       immutable: false
 119       annotations:
 120         source:
 121           type: org.openecomp.annotations.Source
 122           properties:
 123             vf_module_label:
 124             - base_firstnet_fgi_frwl
 125             source_type: HEAT
 126             param_name: vnf_name
 127       type: string
 128       description: Unique name for this VF instance
 129       default: zrdm3firstnetfcgi02
 130     cgi_fw_flavor_name:
 131       hidden: false
 132       immutable: false
 133       annotations:
 134         source:
 135           type: org.openecomp.annotations.Source
 136           properties:
 137             vf_module_label:
 138             - base_firstnet_fgi_frwl
 139             source_type: HEAT
 140             param_name: cgi_fw_flavor_name
 141       type: string
 142       description: flavor for the ServiceInstance VM
 143       default: m1.xlarge
 144     vf_module_name:
 145       hidden: false
 146       immutable: false
 147       annotations:
 148         source:
 149           type: org.openecomp.annotations.Source
 150           properties:
 151             vf_module_label:
 152             - base_firstnet_fgi_frwl
 153             source_type: HEAT
 154             param_name: vf_module_name
 155       type: string
 156       description: Unique name for this VF Module instance
 157       default: zsde1fcgi02
 158     cgi_fw_st_type:
 159       hidden: false
 160       immutable: false
 161       annotations:
 162         source:
 163           type: org.openecomp.annotations.Source
 164           properties:
 165             vf_module_label:
 166             - base_firstnet_fgi_frwl
 167             source_type: HEAT
 168             param_name: cgi_fw_st_type
 169       type: string
 170       description: service_type for the ServiceTemplate
 171       default: firewall
 172     sgi_protected_net_dummy_fqdn:
 173       hidden: false
 174       immutable: false
 175       annotations:
 176         source:
 177           type: org.openecomp.annotations.Source
 178           properties:
 179             vf_module_label:
 180             - base_firstnet_fgi_frwl
 181             source_type: HEAT
 182             param_name: sgi_protected_net_dummy_fqdn
 183       type: string
 184       description: fq_name for the VirtualNetwork
 185       default: default-domain:ALU-L3:firstnet_dummy_net_1
 186     cgi_fw_vmi_ecmp_src_port:
 187       hidden: false
 188       immutable: false
 189       annotations:
 190         source:
 191           type: org.openecomp.annotations.Source
 192           properties:
 193             vf_module_label:
 194             - base_firstnet_fgi_frwl
 195             source_type: HEAT
 196             param_name: cgi_fw_vmi_ecmp_src_port
 197       type: boolean
 198       description: source_port for the VirtualMachineInterface
 199       default: false
 200     sgi_protected_net_dummy1:
 201       hidden: false
 202       immutable: false
 203       annotations:
 204         source:
 205           type: org.openecomp.annotations.Source
 206           properties:
 207             vf_module_label:
 208             - base_firstnet_fgi_frwl
 209             source_type: HEAT
 210             param_name: sgi_protected_net_dummy1
 211       type: string
 212       description: name for the VirtualNetwork
 213     vnf_id:
 214       hidden: false
 215       immutable: false
 216       annotations:
 217         source:
 218           type: org.openecomp.annotations.Source
 219           properties:
 220             vf_module_label:
 221             - base_firstnet_fgi_frwl
 222             source_type: HEAT
 223             param_name: vnf_id
 224       type: string
 225       description: Unique ID for this VF instance
 226       default: dummy_vnf_id
 227     sgi_direct_net_fqdn:
 228       hidden: false
 229       immutable: false
 230       annotations:
 231         source:
 232           type: org.openecomp.annotations.Source
 233           properties:
 234             vf_module_label:
 235             - base_firstnet_fgi_frwl
 236             source_type: HEAT
 237             param_name: sgi_direct_net_fqdn
 238       type: string
 239       description: fq_name for the VirtualNetwork
 240       default: default-domain:ALU-L3:fgi_direct
 241     sgi_protected_interface_type:
 242       hidden: false
 243       immutable: false
 244       annotations:
 245         source:
 246           type: org.openecomp.annotations.Source
 247           properties:
 248             vf_module_label:
 249             - base_firstnet_fgi_frwl
 250             source_type: HEAT
 251             param_name: sgi_protected_interface_type
 252       type: string
 253       description: service_interface_type for ServiceInstance
 254       default: left
 255     cgi_fw_vmi_ecmp_dst_port:
 256       hidden: false
 257       immutable: false
 258       annotations:
 259         source:
 260           type: org.openecomp.annotations.Source
 261           properties:
 262             vf_module_label:
 263             - base_firstnet_fgi_frwl
 264             source_type: HEAT
 265             param_name: cgi_fw_vmi_ecmp_dst_port
 266       type: boolean
 267       description: destination_port for the VirtualMachineInterface
 268       default: false
 269     sgi_direct_family_v6:
 270       hidden: false
 271       immutable: false
 272       annotations:
 273         source:
 274           type: org.openecomp.annotations.Source
 275           properties:
 276             vf_module_label:
 277             - base_firstnet_fgi_frwl
 278             source_type: HEAT
 279             param_name: sgi_direct_family_v6
 280       type: string
 281       description: IP Family Address for InstanceIp
 282       default: v6
 283     availability_zone_0:
 284       hidden: false
 285       immutable: false
 286       annotations:
 287         source:
 288           type: org.openecomp.annotations.Source
 289           properties:
 290             vf_module_label:
 291             - base_firstnet_fgi_frwl
 292             source_type: HEAT
 293             param_name: availability_zone_0
 294       type: string
 295       description: availability_zone for the ServiceInstance
 296       default: nova
 297     availability_zone_1:
 298       hidden: false
 299       immutable: false
 300       annotations:
 301         source:
 302           type: org.openecomp.annotations.Source
 303           properties:
 304             vf_module_label:
 305             - base_firstnet_fgi_frwl
 306             source_type: HEAT
 307             param_name: availability_zone_1
 308       type: string
 309       description: availability_zone for the ServiceInstance
 310       default: nova
 311     nimbus_hsl_net_fqdn:
 312       hidden: false
 313       immutable: false
 314       annotations:
 315         source:
 316           type: org.openecomp.annotations.Source
 317           properties:
 318             vf_module_label:
 319             - base_firstnet_fgi_frwl
 320             source_type: HEAT
 321             param_name: nimbus_hsl_net_fqdn
 322       type: string
 323       description: fq_name for the VirtualNetwork
 324       default: default-domain:ALU-L3:alu-firstnet-net
 325     sgi_protected_net_dummy:
 326       hidden: false
 327       immutable: false
 328       annotations:
 329         source:
 330           type: org.openecomp.annotations.Source
 331           properties:
 332             vf_module_label:
 333             - base_firstnet_fgi_frwl
 334             source_type: HEAT
 335             param_name: sgi_protected_net_dummy
 336       type: string
 337       description: name for the VirtualNetwork
 338       default: firstnet_dummy_net_1
 339     cgi_fw_pt_vlan_VM1_name_fqdn:
 340       hidden: false
 341       immutable: false
 342       annotations:
 343         source:
 344           type: org.openecomp.annotations.Source
 345           properties:
 346             vf_module_label:
 347             - base_firstnet_fgi_frwl
 348             source_type: HEAT
 349             param_name: cgi_fw_pt_vlan_VM1_name_fqdn
 350       type: json
 351       description: fqdn of the ServiceInstance in PortTuple Resource
 352       default: [
 353         ]
 354     cgi_fw_vmi_ecmp_configured:
 355       hidden: false
 356       immutable: false
 357       annotations:
 358         source:
 359           type: org.openecomp.annotations.Source
 360           properties:
 361             vf_module_label:
 362             - base_firstnet_fgi_frwl
 363             source_type: HEAT
 364             param_name: cgi_fw_vmi_ecmp_configured
 365       type: boolean
 366       description: hashing_configured for the VirtualMachineInterface
 367       default: true
 368     cgi_fw_vmi_ecmp_ip_protocol:
 369       hidden: false
 370       immutable: false
 371       annotations:
 372         source:
 373           type: org.openecomp.annotations.Source
 374           properties:
 375             vf_module_label:
 376             - base_firstnet_fgi_frwl
 377             source_type: HEAT
 378             param_name: cgi_fw_vmi_ecmp_ip_protocol
 379       type: boolean
 380       description: ip_protocol for the VirtualMachineInterface
 381       default: false
 382     oam_protected_net_fqdn:
 383       hidden: false
 384       immutable: false
 385       annotations:
 386         source:
 387           type: org.openecomp.annotations.Source
 388           properties:
 389             vf_module_label:
 390             - base_firstnet_fgi_frwl
 391             source_type: HEAT
 392             param_name: oam_protected_net_fqdn
 393       type: string
 394       description: fq_name for the VirtualNetwork
 395       default: default-domain:ALU-L3:alu_l3_mt_net
 396     oam_protected_interface_type:
 397       hidden: false
 398       immutable: false
 399       annotations:
 400         source:
 401           type: org.openecomp.annotations.Source
 402           properties:
 403             vf_module_label:
 404             - base_firstnet_fgi_frwl
 405             source_type: HEAT
 406             param_name: oam_protected_interface_type
 407       type: string
 408       description: service_interface_type for ServiceInstance
 409       default: management
 410     cgi_fw_st_mode:
 411       hidden: false
 412       immutable: false
 413       annotations:
 414         source:
 415           type: org.openecomp.annotations.Source
 416           properties:
 417             vf_module_label:
 418             - base_firstnet_fgi_frwl
 419             source_type: HEAT
 420             param_name: cgi_fw_st_mode
 421       type: string
 422       description: service_mode for the ServiceTemplate
 423       default: in-network-nat
 424     sgi_direct_ipv6_subnet_id:
 425       hidden: false
 426       immutable: false
 427       annotations:
 428         source:
 429           type: org.openecomp.annotations.Source
 430           properties:
 431             vf_module_label:
 432             - base_firstnet_fgi_frwl
 433             source_type: HEAT
 434             param_name: sgi_direct_ipv6_subnet_id
 435       type: string
 436       description: Subnet UUID for InstanceIp
 437       default: 4560666e-f306-4d7b-b0ec-a2d4330e9600
 438     contrail_vmi_subinterface:
 439       hidden: false
 440       immutable: false
 441       annotations:
 442         source:
 443           type: org.openecomp.annotations.Source
 444           properties:
 445             vf_module_label:
 446             - base_firstnet_fgi_frwl
 447             source_type: HEAT
 448             param_name: contrail_vmi_subinterface
 449       type: string
 450     port_name:
 451       hidden: false
 452       immutable: false
 453       annotations:
 454         source:
 455           type: org.openecomp.annotations.Source
 456           properties:
 457             vf_module_label:
 458             - base_firstnet_fgi_frwl
 459             source_type: HEAT
 460             param_name: port_name
 461       type: string
 462     cgi_fw_image_name:
 463       hidden: false
 464       immutable: false
 465       annotations:
 466         source:
 467           type: org.openecomp.annotations.Source
 468           properties:
 469             vf_module_label:
 470             - base_firstnet_fgi_frwl
 471             source_type: HEAT
 472             param_name: cgi_fw_image_name
 473       type: string
 474       description: image_name for the ServiceInstance VM
 475       default: F5_LB-FW_F5_12_1_HF1_Startup
 476     cgi_fw_oam_protected_ips:
 477       hidden: false
 478       immutable: false
 479       annotations:
 480         source:
 481           type: org.openecomp.annotations.Source
 482           properties:
 483             vf_module_label:
 484             - base_firstnet_fgi_frwl
 485             source_type: HEAT
 486             param_name: cgi_fw_oam_protected_ips
 487       type: list
 488       description: the ips of the management network for CGI FW
 489       default:
 490       - 192.168.50.40
 491       - 192.168.50.41
 492       entry_schema:
 493         type: string
 494     sgi_direct_subnet_id:
 495       hidden: false
 496       immutable: false
 497       annotations:
 498         source:
 499           type: org.openecomp.annotations.Source
 500           properties:
 501             vf_module_label:
 502             - base_firstnet_fgi_frwl
 503             source_type: HEAT
 504             param_name: sgi_direct_subnet_id
 505       type: string
 506       description: Subnet UUID for InstanceIp
 507       default: 63858a9d-696b-4731-b3b3-7c8dfd777b9e
 508     domain:
 509       hidden: false
 510       immutable: false
 511       annotations:
 512         source:
 513           type: org.openecomp.annotations.Source
 514           properties:
 515             vf_module_label:
 516             - base_firstnet_fgi_frwl
 517             source_type: HEAT
 518             param_name: domain
 519       type: string
 520       description: domain for the ServiceTemplate
 521       default: default-domain
 522     cgi_fw_st_version:
 523       hidden: false
 524       immutable: false
 525       annotations:
 526         source:
 527           type: org.openecomp.annotations.Source
 528           properties:
 529             vf_module_label:
 530             - base_firstnet_fgi_frwl
 531             source_type: HEAT
 532             param_name: cgi_fw_st_version
 533       type: float
 534       description: version for the ServiceTemplate
 535       default: 2
 536       constraints:
 537       - in_range:
 538         - 0
 539         - 99
 540     cgi_fw_st_virtualization_type:
 541       hidden: false
 542       immutable: false
 543       annotations:
 544         source:
 545           type: org.openecomp.annotations.Source
 546           properties:
 547             vf_module_label:
 548             - base_firstnet_fgi_frwl
 549             source_type: HEAT
 550             param_name: cgi_fw_st_virtualization_type
 551       type: string
 552       description: service_virtualization_type for the ServiceTemplate
 553       default: virtual-machine
 554     subinterface_name_prefix:
 555       hidden: false
 556       immutable: false
 557       annotations:
 558         source:
 559           type: org.openecomp.annotations.Source
 560           properties:
 561             vf_module_label:
 562             - base_firstnet_fgi_frwl
 563             source_type: HEAT
 564             param_name: subinterface_name_prefix
 565       type: string
 566   node_templates:
 567     CGI_FW_OAM_PROTECTED_RVMI_2:
 568       type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
 569       properties:
 570         name:
 571           str_replace:
 572             template: VM_NAME_vmi_1
 573             params:
 574               VM_NAME:
 575                 get_input:
 576                 - cgi_fw_names
 577                 - 1
 578         security_group_refs:
 579         - CGI_FW_RSG_SI_1
 580         virtual_network_refs:
 581         - get_input: oam_protected_net_fqdn
 582         virtual_machine_interface_properties:
 583           service_interface_type:
 584             get_input: oam_protected_interface_type
 585       requirements:
 586       - binding:
 587           capability: tosca.capabilities.network.Bindable
 588           node: CGI_FW_SERVER_2
 589           relationship: tosca.relationships.network.BindsTo
 590     CGI_FW_SGI_DIRECT_RVMI_1:
 591       type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
 592       properties:
 593         name:
 594           str_replace:
 595             template: VM_NAME_vmi_3
 596             params:
 597               VM_NAME:
 598                 get_input:
 599                 - cgi_fw_names
 600                 - 0
 601         security_group_refs:
 602         - CGI_FW_RSG_SI_1
 603         virtual_network_refs:
 604         - get_input: sgi_direct_net_fqdn
 605         virtual_machine_interface_properties:
 606           service_interface_type:
 607             get_input: sgi_direct_interface_type
 608         port_tuple_refs:
 609           get_input: cgi_fw_pt_vlan_VM1_name_fqdn
 610       requirements:
 611       - binding:
 612           capability: tosca.capabilities.network.Bindable
 613           node: CGI_FW_SERVER_1
 614           relationship: tosca.relationships.network.BindsTo
 615     CGI_FW_OAM_PROTECTED_RVMI_1:
 616       type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
 617       properties:
 618         name:
 619           str_replace:
 620             template: VM_NAME_vmi_1
 621             params:
 622               VM_NAME:
 623                 get_input:
 624                 - cgi_fw_names
 625                 - 0
 626         security_group_refs:
 627         - CGI_FW_RSG_SI_1
 628         virtual_network_refs:
 629         - get_input: oam_protected_net_fqdn
 630         virtual_machine_interface_properties:
 631           service_interface_type:
 632             get_input: oam_protected_interface_type
 633       requirements:
 634       - binding:
 635           capability: tosca.capabilities.network.Bindable
 636           node: CGI_FW_SERVER_1
 637           relationship: tosca.relationships.network.BindsTo
 638     CGI_FW_SGI_DIRECT_RVMI_2:
 639       type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
 640       properties:
 641         name:
 642           str_replace:
 643             template: VM_NAME_vmi_3
 644             params:
 645               VM_NAME:
 646                 get_input:
 647                 - cgi_fw_names
 648                 - 1
 649         security_group_refs:
 650         - CGI_FW_RSG_SI_1
 651         virtual_network_refs:
 652         - get_input: sgi_direct_net_fqdn
 653         virtual_machine_interface_properties:
 654           service_interface_type:
 655             get_input: sgi_direct_interface_type
 656         port_tuple_refs:
 657           get_input: cgi_fw_pt_vlan_VM2_name_fqdn
 658       requirements:
 659       - binding:
 660           capability: tosca.capabilities.network.Bindable
 661           node: CGI_FW_SERVER_2
 662           relationship: tosca.relationships.network.BindsTo
 663     CGI_FW_NIMBUS_HSL_RVMI_2:
 664       type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
 665       properties:
 666         name:
 667           str_replace:
 668             template: VM_NAME_vmi_4
 669             params:
 670               VM_NAME:
 671                 get_input:
 672                 - cgi_fw_names
 673                 - 1
 674         security_group_refs:
 675         - CGI_FW_RSG_SI_1
 676         virtual_network_refs:
 677         - get_input: nimbus_hsl_net_fqdn
 678         virtual_machine_interface_properties:
 679           service_interface_type:
 680             get_input: nimbus_hsl_interface_type
 681       requirements:
 682       - binding:
 683           capability: tosca.capabilities.network.Bindable
 684           node: CGI_FW_SERVER_2
 685           relationship: tosca.relationships.network.BindsTo
 686     CGI_FW_NIMBUS_HSL_RVMI_1:
 687       type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
 688       properties:
 689         name:
 690           str_replace:
 691             template: VM_NAME_vmi_4
 692             params:
 693               VM_NAME:
 694                 get_input:
 695                 - cgi_fw_names
 696                 - 0
 697         security_group_refs:
 698         - CGI_FW_RSG_SI_1
 699         virtual_network_refs:
 700         - get_input: nimbus_hsl_net_fqdn
 701         virtual_machine_interface_properties:
 702           service_interface_type:
 703             get_input: nimbus_hsl_interface_type
 704       requirements:
 705       - binding:
 706           capability: tosca.capabilities.network.Bindable
 707           node: CGI_FW_SERVER_1
 708           relationship: tosca.relationships.network.BindsTo
 709     CGI_FW_SERVER_1:
 710       type: org.openecomp.resource.vfc.nodes.heat.cgi_fw
 711       properties:
 712         flavor:
 713           get_input: cgi_fw_flavor_name
 714         availability_zone:
 715           get_input: availability_zone_0
 716         image:
 717           get_input: cgi_fw_image_name
 718         metadata:
 719           vf_module_id:
 720             get_input: vf_module_id
 721           vnf_id:
 722             get_input: vnf_id
 723           vnf_name:
 724             get_input: vnf_name
 725           vf_module_name:
 726             get_input: vf_module_name
 727         contrail_service_instance_ind: true
 728         name:
 729           get_input:
 730           - cgi_fw_names
 731           - 0
 732         scheduler_hints:
 733           group: CGI_FW_RAG_group
 734     CGI_FW_RSG_SI_1:
 735       type: org.openecomp.resource.vfc.rules.nodes.heat.network.neutron.SecurityRules
 736       properties:
 737         name:
 738           str_replace:
 739             template: VNF_NAME_sg_cgi_fw
 740             params:
 741               VNF_NAME:
 742                 get_input: vnf_name
 743         description: Security Group of CGI FW ServiceInstance
 744         rules:
 745         - protocol: tcp
 746           ethertype: IPv4
 747           remote_ip_prefix: 0.0.0.0/0
 748           port_range_max: 65535
 749           direction: egress
 750           port_range_min: 0
 751         - protocol: udp
 752           ethertype: IPv4
 753           remote_ip_prefix: 0.0.0.0/0
 754           port_range_max: 65535
 755           direction: egress
 756           port_range_min: 0
 757         - protocol: '132'
 758           ethertype: IPv4
 759           remote_ip_prefix: 0.0.0.0/0
 760           port_range_max: 65535
 761           direction: egress
 762           port_range_min: 0
 763         - protocol: icmp
 764           ethertype: IPv4
 765           remote_ip_prefix: 0.0.0.0/0
 766           direction: egress
 767         - protocol: tcp
 768           ethertype: IPv6
 769           remote_ip_prefix: ::/0
 770           port_range_max: 65535
 771           direction: egress
 772           port_range_min: 0
 773         - protocol: udp
 774           ethertype: IPv6
 775           remote_ip_prefix: ::/0
 776           port_range_max: 65535
 777           direction: egress
 778           port_range_min: 0
 779         - protocol: '132'
 780           ethertype: IPv6
 781           remote_ip_prefix: ::/0
 782           port_range_max: 65535
 783           direction: egress
 784           port_range_min: 0
 785         - protocol: '58'
 786           ethertype: IPv6
 787           remote_ip_prefix: ::/0
 788           direction: egress
 789         - protocol: tcp
 790           ethertype: IPv4
 791           remote_ip_prefix: 0.0.0.0/0
 792           port_range_max: 65535
 793           direction: ingress
 794           port_range_min: 0
 795         - protocol: udp
 796           ethertype: IPv4
 797           remote_ip_prefix: 0.0.0.0/0
 798           port_range_max: 65535
 799           direction: ingress
 800           port_range_min: 0
 801         - protocol: '132'
 802           ethertype: IPv4
 803           remote_ip_prefix: 0.0.0.0/0
 804           port_range_max: 65535
 805           direction: ingress
 806           port_range_min: 0
 807         - protocol: icmp
 808           ethertype: IPv4
 809           remote_ip_prefix: 0.0.0.0/0
 810           direction: ingress
 811         - protocol: tcp
 812           ethertype: IPv6
 813           remote_ip_prefix: ::/0
 814           port_range_max: 65535
 815           direction: ingress
 816           port_range_min: 0
 817         - protocol: udp
 818           ethertype: IPv6
 819           remote_ip_prefix: ::/0
 820           port_range_max: 65535
 821           direction: ingress
 822           port_range_min: 0
 823         - protocol: '132'
 824           ethertype: IPv6
 825           remote_ip_prefix: ::/0
 826           port_range_max: 65535
 827           direction: ingress
 828           port_range_min: 0
 829         - protocol: '58'
 830           ethertype: IPv6
 831           remote_ip_prefix: ::/0
 832           direction: ingress
 833     CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2:
 834       type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
 835       properties:
 836         name:
 837           str_replace:
 838             template: VM_NAME_vmi_dummy
 839             params:
 840               VM_NAME:
 841                 get_input:
 842                 - cgi_fw_names
 843                 - 1
 844         security_group_refs:
 845         - CGI_FW_RSG_SI_1
 846         virtual_network_refs:
 847         - get_input: sgi_protected_net_dummy_fqdn
 848       requirements:
 849       - binding:
 850           capability: tosca.capabilities.network.Bindable
 851           node: CGI_FW_SERVER_2
 852           relationship: tosca.relationships.network.BindsTo
 853     CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1:
 854       type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
 855       properties:
 856         name:
 857           str_replace:
 858             template: VM_NAME_vmi_dummy
 859             params:
 860               VM_NAME:
 861                 get_input:
 862                 - cgi_fw_names
 863                 - 0
 864         security_group_refs:
 865         - CGI_FW_RSG_SI_1
 866         virtual_network_refs:
 867         - get_input: sgi_protected_net_dummy_fqdn
 868       requirements:
 869       - binding:
 870           capability: tosca.capabilities.network.Bindable
 871           node: CGI_FW_SERVER_1
 872           relationship: tosca.relationships.network.BindsTo
 873     CGI_FW_SERVER_2:
 874       type: org.openecomp.resource.vfc.nodes.heat.cgi_fw
 875       properties:
 876         flavor:
 877           get_input: cgi_fw_flavor_name
 878         availability_zone:
 879           get_attribute:
 880           - CGI_FW_SERVER_2
 881           - addresses
 882           - get_input:
 883             - sgi_protected_net_dummy
 884             - 0
 885           - 0
 886           - OS-EXT-IPS-MAC:mac_addr
 887         image:
 888           get_input: cgi_fw_image_name
 889         metadata:
 890           vf_module_id:
 891             get_input: vf_module_id
 892           vnf_id:
 893             get_input: vnf_id
 894           vnf_name:
 895             get_input: vnf_name
 896           vf_module_name:
 897             get_input: vf_module_name
 898         contrail_service_instance_ind: true
 899         name:
 900           get_input:
 901           - cgi_fw_names
 902           - 1
 903         scheduler_hints:
 904           group: CGI_FW_RAG_group
 905     contrail_vmi_subinterface:
 906       type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
 907       properties:
 908         name:
 909           str_replace:
 910             template: VM_NAME_PORT_3
 911             params:
 912               VM_NAME:
 913                 get_input: vipr_atm_name_0
 914         virtual_network_refs:
 915         - get_input: oam_protected_net_fqdn
 916         virtual_machine_interface_properties:
 917           service_interface_type: left
 918         port_tuple_refs:
 919         - get_input: port_name
 920   groups:
 921     CGI_FW_RAG_group:
 922       type: tosca.groups.Root
 923       members:
 924       - CGI_FW_SERVER_1
 925       - CGI_FW_SERVER_2
 926     base_firstnet_fgi_frwl_group:
 927       type: org.openecomp.groups.heat.HeatStack
 928       properties:
 929         heat_file: ../Artifacts/base_firstnet_fgi_frwl.yml
 930         description: |
 931           HOT template to create SecurityGroup//ServerGroup//ServiceTemplate:
 932       members:
 933       - CGI_FW_OAM_PROTECTED_RVMI_2
 934       - CGI_FW_SGI_DIRECT_RVMI_1
 935       - CGI_FW_OAM_PROTECTED_RVMI_1
 936       - CGI_FW_SGI_DIRECT_RVMI_2
 937       - CGI_FW_NIMBUS_HSL_RVMI_2
 938       - CGI_FW_NIMBUS_HSL_RVMI_1
 939       - CGI_FW_SERVER_1
 940       - CGI_FW_RSG_SI_1
 941       - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
 942       - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
 943       - CGI_FW_SERVER_2
 944       - contrail_vmi_subinterface
 945   outputs:
 946     cgi_fw_01_left_mac_10:
 947       description: cgi fw01 left interface Mac-Address
 948       value:
 949         get_attribute:
 950         - CGI_FW_SERVER_2
 951         - addresses
 952         - str_split:
 953           - ','
 954           - get_attribute:
 955             - contrail_vmi_subinterface
 956             - virtual_machine_interface_allowed_address_pairs
 957             - allowed_address_pair
 958         - 0
 959         - OS-EXT-IPS-MAC:mac_addr
 960     cgi_fw_st_name_fqdn:
 961       description: FQDN of the FW_CGI ServiceTemplate
 962       value:
 963         list_join:
 964         - ':'
 965         - get_attr:
 966           - CGI_FW_RST_1
 967           - fq_name
 968     VMA-EXT_IPS:
 969       description: IP addresses assigned to the first external network.
 970       value:
 971       - UNSUPPORTED_ATTRIBUTE_CGI_FW_SERVER_2.{get_param=[vnf_id, {get_param=sgi_protected_interface_type}]}
 972     VMA-DynamicResource:
 973       description: IP addresses assigned to the first external network.
 974       value:
 975       - UNSUPPORTED_RESOURCE_{get_param=vnf_id}
 976     cgi_fw_01_left_mac_7:
 977       description: cgi fw01 left interface Mac-Address
 978       value:
 979         get_attribute:
 980         - contrail_vmi_subinterface
 981         - virtual_machine_interface_properties
 982     cgi_fw_01_left_mac_6:
 983       description: cgi fw01 left interface Mac-Address
 984       value:
 985         get_attribute:
 986         - CGI_FW_SERVER_2
 987         - addresses
 988         - str_split:
 989           - ','
 990           - string,to,split
 991         - 0
 992         - OS-EXT-IPS-MAC:mac_addr
 993     cgi_fw_01_left_mac_9:
 994       description: cgi fw01 left interface Mac-Address
 995       value:
 996         get_attribute:
 997         - CGI_FW_SERVER_2
 998         - addresses
 999         - str_split:
1000           - ','
1001           - get_input: sgi_protected_net_dummy
1002         - 0
1003         - OS-EXT-IPS-MAC:mac_addr
1004     cgi_fw_01_left_mac_8:
1005       description: cgi fw01 left interface Mac-Address
1006       value:
1007         get_attribute:
1008         - contrail_vmi_subinterface
1009         - virtual_machine_interface_allowed_address_pairs
1010         - allowed_address_pair
1011     cgi_fw_01_left_mac_3:
1012       description: cgi fw01 left interface Mac-Address
1013       value:
1014         get_attribute:
1015         - CGI_FW_SERVER_2
1016         - addresses
1017         - get_input:
1018           - sgi_protected_net_dummy
1019           - 0
1020         - 0
1021         - OS-EXT-IPS-MAC:mac_addr
1022     cgi_fw_01_left_mac_2:
1023       description: cgi fw01 left interface Mac-Address
1024       value:
1025         get_attribute:
1026         - CGI_FW_SERVER_2
1027         - addresses
1028         - get_input: sgi_protected_net_dummy
1029         - 0
1030         - OS-EXT-IPS-MAC:mac_addr
1031     cgi_fw_01_left_mac_5:
1032       description: cgi fw01 left interface Mac-Address
1033       value:
1034         get_attribute:
1035         - CGI_FW_SERVER_2
1036         - addresses
1037         - get_attribute:
1038           - CGI_FW_SERVER_2
1039           - addresses
1040           - get_input:
1041             - sgi_protected_net_dummy
1042             - 0
1043           - 0
1044           - OS-EXT-IPS-MAC:mac_addr
1045         - 0
1046         - OS-EXT-IPS-MAC:mac_addr
1047     cgi_fw_01_left_mac_4:
1048       description: cgi fw01 left interface Mac-Address
1049       value:
1050         get_attribute:
1051         - CGI_FW_SERVER_2
1052         - addresses
1053         - get_input:
1054           - sgi_protected_net_dummy
1055           - 0
1056           - get_input:
1057             - sgi_protected_net_dummy1
1058             - 1
1059         - 0
1060         - OS-EXT-IPS-MAC:mac_addr
1061     cgi_fw_01_left_mac_1:
1062       description: cgi fw01 left interface Mac-Address
1063       value:
1064         get_attribute:
1065         - CGI_FW_SERVER_1
1066         - addresses
1067         - get_input: sgi_protected_net_dummy
1068         - 0
1069         - OS-EXT-IPS-MAC:mac_addr
1070   policies:
1071     CGI_FW_RAG_policy:
1072       type: org.openecomp.policies.placement.Antilocate
1073       properties:
1074         name:
1075           str_replace:
1076             template: VNF_NAME_srg_cgi_fw
1077             params:
1078               VNF_NAME:
1079                 get_input: vnf_name
1080         container_type: host
1081       targets:
1082       - CGI_FW_RAG_group