ba730546eabf1d389c5112b368086ed331363953
[sdc.git] /
1 description: "HOT template to deploy a vDBE HA of type DBE-I, DBE-P, DBE-AFC, and DBE-V (non-trunkport) cluster into an existing tenant network and assign network interfaces to the vDBE"
2 heat_template_version: 2015-04-30
3 parameters: 
4   aap_address_mode: 
5     description: "Address mode for the vDBE cluster IP"
6     type: string
7   availability_zone_0: 
8     description: "The availability zone of primary node0 vDBE vm in the local HA pair."
9     type: string
10   availability_zone_1: 
11     description: "The availability zone of secondary node1 vDBE vm in the local HA pair."
12     type: string
13   control_int_net_flood_unknown_unicast: 
14     description: "forwarding mode of the control virtual network"
15     type: boolean
16   control_int_net_forwarding_mode: 
17     description: "forwarding mode of the control virtual network"
18     type: string
19   control_int_net_rpf: 
20     description: "Reverse Path Filtering enable or disable for the control virtual network"
21     type: string
22   control_int_net_shared: 
23     description: "control virtual network shared"
24     type: boolean
25   control_subnet_cidr: 
26     description: "control subnet CIDR"
27     type: string
28   fabric_int_net_flood_unknown_unicast: 
29     description: "forwarding mode of the fabric virtual network"
30     type: boolean
31   fabric_int_net_forwarding_mode: 
32     description: "forwarding mode of the fabric virtual network"
33     type: string
34   fabric_int_net_rpf: 
35     description: "Reverse Path Filtering enable or disable for the fabric virtual network"
36     type: string
37   fabric_int_net_shared: 
38     description: "fabric virtual network shared"
39     type: boolean
40   fabric_subnet_cidr: 
41     description: "fabric subnet CIDR"
42     type: string
43   oam_net_name: 
44     description: "Name of NSDNet network from which the management IP addresses will be allocated"
45     type: string
46   trusted_net_name: 
47     description: "Name of public trusted network into which this vDBE HA cluster is deployed"
48     type: string
49   untrusted_net_name: 
50     description: "Name of public untrusted network into which this vDBE HA cluster is deployed"
51     type: string
52   untrusted_num_vn: 
53     constraints: 
54       - 
55         range: 
56           max: 77
57           min: 1
58     description: "Number of vDBE subinterface virtual Networks"
59     type: number
60   untrusted_vlan_tags: 
61     description: "List of subinterface vlan tags"
62     type: comma_delimited_list
63   untrusted_vn_networks: 
64     description: "List of subinterface virtual networks"
65     type: comma_delimited_list
66   vdbe_aap_sec_trusted_ip_prefix: 
67     description: "ip prefix for the secondary vDBE VM aap on the VAN trusted network"
68     type: string
69   vdbe_aap_sec_trusted_ip_prefix_len: 
70     description: "ip prefix length for the secondary vDBE VM aap on the VAN trusted network"
71     type: string
72   vdbe_aap_sec_untrusted_ip_prefix: 
73     description: "ip prefix for secondary vDBE VM aap on the VAN untrusted network"
74     type: string
75   vdbe_aap_sec_untrusted_ip_prefix_len: 
76     description: "ip prefix length for the secondary DBE VM aap on the VAN untrusted network"
77     type: string
78   vdbe_aap_trusted_ip_prefix: 
79     description: "ip prefix for the primary vDBE VM on the VAN trusted network"
80     type: string
81   vdbe_aap_trusted_ip_prefix_len: 
82     description: "ip prefix length for the primary vDBE VM on the VAN trusted network"
83     type: string
84   vdbe_aap_trusted_v6_ip_prefix: 
85     description: "ipv6 prefix for the primary vDBE VM on the VAN trusted network"
86     type: string
87   vdbe_aap_trusted_v6_ip_prefix_len: 
88     description: "ipv6 prefix length for the primary vDBE VM on the VAN trusted network"
89     type: string
90   vdbe_aap_untrusted_ip_prefix: 
91     description: "ip prefix for primary vDBE VM on the VAN untrusted network"
92     type: string
93   vdbe_aap_untrusted_ip_prefix_len: 
94     description: "ip prefix length for the primary vDBE VM on the VAN untrusted network"
95     type: string
96   vdbe_aap_untrusted_v6_ip_prefix: 
97     description: "ipv6 prefix for the primary vDBE VM on the VAN untrusted network"
98     type: string
99   vdbe_aap_untrusted_v6_ip_prefix_len: 
100     description: "ipv6 prefix length for the primary vDBE VM on the VAN untrusted network"
101     type: string
102   vdbe_control_ip_0: 
103     description: "IP address of the primary vDBE VM on the HA control network"
104     type: string
105   vdbe_control_ip_1: 
106     description: "IP address of the secondary vDBE VM on the HA control network"
107     type: string
108   vdbe_device_name: 
109     description: "VDBE device Name for this vdbe VNF"
110     type: string
111   vdbe_fabric_ip_0: 
112     description: "IP address of the primary vDBE VM on the HA fabric network"
113     type: string
114   vdbe_fabric_ip_1: 
115     description: "IP address of the secondary vDBE VM on the HA fabric network"
116     type: string
117   vdbe_flavor_name: 
118     description: "Flavor to use for vDBE"
119     type: string
120   vdbe_hw_trst_mac_0: 
121     description: "Secondary MAC address of the primary vDBE VM on the VAN trusted network"
122     type: string
123   vdbe_hw_trst_mac_1: 
124     description: "Secondary MAC address of the secondary vDBE VM on the VAN trusted network"
125     type: string
126   vdbe_hw_untr_mac_0: 
127     description: "Secondary MAC address of the primary vDBE VM on the VAN untrusted network"
128     type: string
129   vdbe_hw_untr_mac_1: 
130     description: "Secondary MAC address of the secondary vDBE VM on the VAN untrusted network"
131     type: string
132   vdbe_image_name: 
133     description: "Name of image to use for vDBE"
134     type: string
135   vdbe_name_0: 
136     description: "VM Name for this vdbe node 0"
137     type: string
138   vdbe_name_1: 
139     description: "VM Name for this vdbe node 1"
140     type: string
141   vdbe_oam_ip_0: 
142     description: "IP address of the primary vDBE VM on the OAM network"
143     type: string
144   vdbe_oam_ip_1: 
145     description: "IP address of the secondary vDBE VM on the OAM network"
146     type: string
147   vdbe_oam_mac_0: 
148     description: "MAC address of the primary vDBE VM on the OAM network"
149     type: string
150   vdbe_oam_mac_1: 
151     description: "MAC address of the secondary vDBE VM on the OAM network"
152     type: string
153   vdbe_trusted_ip_0: 
154     description: "IPV4 address of the primary vDBE VM on the VAN trusted network"
155     type: string
156   vdbe_trusted_ip_1: 
157     description: "IPV4 address of the secondary vDBE VM on the VAN trusted network"
158     type: string
159   vdbe_trusted_v6_ip_0: 
160     description: "IPV6 address of the primary vDBE VM on the VAN trusted network"
161     type: string
162   vdbe_trusted_v6_ip_1: 
163     description: "IPV6 address of the secondary vDBE VM on the VAN trusted network"
164     type: string
165   vdbe_trusted_vmac_address: 
166     description: "Virtual MAC for the primary vDBE VM on the VAN trusted network"
167     type: string
168   vdbe_untrusted_ip_0: 
169     description: "IPV4 address of the primary vDBE VM on the VAN untrusted network"
170     type: string
171   vdbe_untrusted_ip_1: 
172     description: "IPV4 address of the secondary vDBE VM on the VAN untrusted network"
173     type: string
174   vdbe_untrusted_v6_ip_0: 
175     description: "IPV6 address of the primary vDBE VM on the VAN untrusted network"
176     type: string
177   vdbe_untrusted_v6_ip_1: 
178     description: "IPV6 address of the secondary vDBE VM on the VAN untrusted network"
179     type: string
180   vdbe_untrusted_vmac_address: 
181     description: "Virtual MAC of the primary vDBE VM on the VAN untrusted network"
182     type: string
183   vf_module_id: 
184     description: "Unique ID for this VF module inst"
185     type: string
186   vnf_id: 
187     description: "Unique ID for this VF inst"
188     type: string
189   vnf_name: 
190     description: "Unique name for this VF instance"
191     type: string
192 resources: 
193   control_int_net: 
194     properties: 
195       flood_unknown_unicast: 
196         get_param: control_int_net_flood_unknown_unicast
197       is_shared: 
198         get_param: control_int_net_shared
199       name: 
200         str_replace: 
201           params: 
202             VNF_NAME: 
203               get_param: vnf_name
204           template: VNF_NAME_control_net
205       virtual_network_properties: 
206         virtual_network_properties_forwarding_mode: 
207           get_param: control_int_net_forwarding_mode
208         virtual_network_properties_rpf: 
209           get_param: control_int_net_rpf
210     type: "OS::ContrailV2::VirtualNetwork"
211   control_subnet: 
212     properties: 
213       cidr: 
214         get_param: control_subnet_cidr
215       name: 
216         str_replace: 
217           params: 
218             VNF_NAME: 
219               get_param: vnf_name
220           template: VNF_NAME_control_subnet
221       network: 
222         get_resource: control_int_net
223     type: "OS::Neutron::Subnet"
224   fabric_int_net: 
225     properties: 
226       flood_unknown_unicast: 
227         get_param: fabric_int_net_flood_unknown_unicast
228       is_shared: 
229         get_param: fabric_int_net_shared
230       name: 
231         str_replace: 
232           params: 
233             VNF_NAME: 
234               get_param: vnf_name
235           template: VNF_NAME_fabric_net
236       virtual_network_properties: 
237         virtual_network_properties_forwarding_mode: 
238           get_param: fabric_int_net_forwarding_mode
239         virtual_network_properties_rpf: 
240           get_param: fabric_int_net_rpf
241     type: "OS::ContrailV2::VirtualNetwork"
242   fabric_subnet: 
243     properties: 
244       cidr: 
245         get_param: fabric_subnet_cidr
246       name: 
247         str_replace: 
248           params: 
249             VNF_NAME: 
250               get_param: vnf_name
251           template: VNF_NAME_fabric_subnet
252       network: 
253         get_resource: fabric_int_net
254     type: "OS::Neutron::Subnet"
255   vdbe_0_untr_vmi_0: 
256     properties: 
257       name: 
258         str_replace: 
259           params: 
260             DBE: 
261               get_param: vdbe_device_name
262             VM_NAME: 
263               get_param: vdbe_name_0
264           template: VM_NAMEDBE001p1n004
265       virtual_machine_interface_allowed_address_pairs: 
266         virtual_machine_interface_allowed_address_pairs_allowed_address_pair: 
267           - 
268             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_address_mode: 
269               get_param: aap_address_mode
270             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip: 
271               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix: 
272                 get_param: vdbe_aap_untrusted_ip_prefix
273               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix_len: 
274                 get_param: vdbe_aap_untrusted_ip_prefix_len
275             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_mac: 
276               get_param: vdbe_untrusted_vmac_address
277           - 
278             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_address_mode: 
279               get_param: aap_address_mode
280             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip: 
281               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix: 
282                 get_param: vdbe_aap_sec_untrusted_ip_prefix
283               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix_len: 
284                 get_param: vdbe_aap_sec_untrusted_ip_prefix_len
285             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_mac: 
286               get_param: vdbe_hw_untr_mac_0
287           - 
288             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_address_mode: 
289               get_param: aap_address_mode
290             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip: 
291               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix: 
292                 get_param: vdbe_aap_untrusted_v6_ip_prefix
293               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix_len: 
294                 get_param: vdbe_aap_untrusted_v6_ip_prefix_len
295             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_mac: 
296               get_param: vdbe_untrusted_vmac_address
297       virtual_machine_interface_mac_addresses: 
298         virtual_machine_interface_mac_addresses_mac_address: 
299           - 
300             get_param: vdbe_hw_untr_mac_0
301       virtual_network_refs: 
302         - 
303           get_param: untrusted_net_name
304     type: "OS::ContrailV2::VirtualMachineInterface"
305   vdbe_1_untr_vmi_1: 
306     properties: 
307       name: 
308         str_replace: 
309           params: 
310             DBE: 
311               get_param: vdbe_device_name
312             VM_NAME: 
313               get_param: vdbe_name_1
314           template: VM_NAMEDBE001p1n004
315       virtual_machine_interface_allowed_address_pairs: 
316         virtual_machine_interface_allowed_address_pairs_allowed_address_pair: 
317           - 
318             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_address_mode: 
319               get_param: aap_address_mode
320             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip: 
321               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix: 
322                 get_param: vdbe_aap_untrusted_ip_prefix
323               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix_len: 
324                 get_param: vdbe_aap_untrusted_ip_prefix_len
325             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_mac: 
326               get_param: vdbe_untrusted_vmac_address
327           - 
328             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_address_mode: 
329               get_param: aap_address_mode
330             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip: 
331               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix: 
332                 get_param: vdbe_aap_sec_untrusted_ip_prefix
333               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix_len: 
334                 get_param: vdbe_aap_sec_untrusted_ip_prefix_len
335             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_mac: 
336               get_param: vdbe_hw_untr_mac_1
337           - 
338             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_address_mode: 
339               get_param: aap_address_mode
340             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip: 
341               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix: 
342                 get_param: vdbe_aap_untrusted_v6_ip_prefix
343               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix_len: 
344                 get_param: vdbe_aap_untrusted_v6_ip_prefix_len
345             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_mac: 
346               get_param: vdbe_untrusted_vmac_address
347       virtual_machine_interface_mac_addresses: 
348         virtual_machine_interface_mac_addresses_mac_address: 
349           - 
350             get_param: vdbe_hw_untr_mac_1
351       virtual_network_refs: 
352         - 
353           get_param: untrusted_net_name
354     type: "OS::ContrailV2::VirtualMachineInterface"
355   vdbe_ServerGroup: 
356     properties: 
357       policies: 
358         - anti-affinity
359     type: "OS::Nova::ServerGroup"
360   vdbe_control_Iip_0: 
361     depends_on: 
362       - vdbe_ctrl_0_port
363     properties: 
364       instance_ip_address: 
365         get_param: vdbe_control_ip_0
366       virtual_machine_interface_refs: 
367         - 
368           get_resource: vdbe_ctrl_0_port
369       virtual_network_refs: 
370         - 
371           get_resource: control_int_net
372     type: "OS::ContrailV2::InstanceIp"
373   vdbe_control_Iip_1: 
374     depends_on: 
375       - vdbe_ctrl_1_port
376     properties: 
377       instance_ip_address: 
378         get_param: vdbe_control_ip_1
379       virtual_machine_interface_refs: 
380         - 
381           get_resource: vdbe_ctrl_1_port
382       virtual_network_refs: 
383         - 
384           get_resource: control_int_net
385     type: "OS::ContrailV2::InstanceIp"
386   vdbe_ctrl_0_port: 
387     properties: 
388       name: 
389         str_replace: 
390           params: 
391             DBE: 
392               get_param: vdbe_device_name
393             VM_NAME: 
394               get_param: vdbe_name_0
395           template: VM_NAMEDBE001p1n002
396       virtual_network_refs: 
397         - 
398           get_resource: control_int_net
399     type: "OS::ContrailV2::VirtualMachineInterface"
400   vdbe_ctrl_1_port: 
401     properties: 
402       name: 
403         str_replace: 
404           params: 
405             DBE: 
406               get_param: vdbe_device_name
407             VM_NAME: 
408               get_param: vdbe_name_1
409           template: VM_NAMEDBE001p1n002
410       virtual_network_refs: 
411         - 
412           get_resource: control_int_net
413     type: "OS::ContrailV2::VirtualMachineInterface"
414   vdbe_fabr_0_port: 
415     properties: 
416       name: 
417         str_replace: 
418           params: 
419             DBE: 
420               get_param: vdbe_device_name
421             VM_NAME: 
422               get_param: vdbe_name_0
423           template: VM_NAMEDBE001p1n003
424       virtual_network_refs: 
425         - 
426           get_resource: fabric_int_net
427     type: "OS::ContrailV2::VirtualMachineInterface"
428   vdbe_fabr_1_port: 
429     properties: 
430       name: 
431         str_replace: 
432           params: 
433             DBE: 
434               get_param: vdbe_device_name
435             VM_NAME: 
436               get_param: vdbe_name_1
437           template: VM_NAMEDBE001p1n003
438       virtual_network_refs: 
439         - 
440           get_resource: fabric_int_net
441     type: "OS::ContrailV2::VirtualMachineInterface"
442   vdbe_fabric_Iip_0: 
443     depends_on: 
444       - vdbe_fabr_0_port
445     properties: 
446       instance_ip_address: 
447         get_param: vdbe_fabric_ip_0
448       virtual_machine_interface_refs: 
449         - 
450           get_resource: vdbe_fabr_0_port
451       virtual_network_refs: 
452         - 
453           get_resource: fabric_int_net
454     type: "OS::ContrailV2::InstanceIp"
455   vdbe_fabric_Iip_1: 
456     depends_on: 
457       - vdbe_fabr_1_port
458     properties: 
459       instance_ip_address: 
460         get_param: vdbe_fabric_ip_1
461       virtual_machine_interface_refs: 
462         - 
463           get_resource: vdbe_fabr_1_port
464       virtual_network_refs: 
465         - 
466           get_resource: fabric_int_net
467     type: "OS::ContrailV2::InstanceIp"
468   vdbe_node_0: 
469     depends_on: 
470       - vdbe_oam_Iip_0
471       - vdbe_control_Iip_0
472       - vdbe_fabric_Iip_0
473       - vdbe_untrusted_Iip_0
474       - vdbe_untrusted_v6_Iip_0
475       - vdbe_trusted_Iip_0
476       - vdbe_trusted_v6_Iip_0
477     properties: 
478       availability_zone: 
479         get_param: availability_zone_0
480       flavor: 
481         get_param: vdbe_flavor_name
482       image: 
483         get_param: vdbe_image_name
484       metadata: 
485         vf_module_id: 
486           get_param: vf_module_id
487         vnf_id: 
488           get_param: vnf_id
489         vnf_name: 
490           get_param: vnf_name
491       name: 
492         get_param: vdbe_name_0
493       networks: 
494         - 
495           port: 
496             get_resource: vdbe_oam_0_port
497         - 
498           port: 
499             get_resource: vdbe_ctrl_0_port
500         - 
501           port: 
502             get_resource: vdbe_fabr_0_port
503         - 
504           port: 
505             get_resource: vdbe_0_untr_vmi_0
506         - 
507           port: 
508             get_resource: vdbe_trst_0_port
509       scheduler_hints: 
510         group: 
511           get_resource: vdbe_ServerGroup
512     type: "OS::Nova::Server"
513   vdbe_node_1: 
514     depends_on: 
515       - vdbe_oam_Iip_1
516       - vdbe_control_Iip_1
517       - vdbe_fabric_Iip_1
518       - vdbe_untrusted_Iip_1
519       - vdbe_untrusted_v6_Iip_1
520       - vdbe_trusted_Iip_1
521       - vdbe_trusted_v6_Iip_1
522     properties: 
523       availability_zone: 
524         get_param: availability_zone_1
525       flavor: 
526         get_param: vdbe_flavor_name
527       image: 
528         get_param: vdbe_image_name
529       metadata: 
530         vf_module_id: 
531           get_param: vf_module_id
532         vnf_id: 
533           get_param: vnf_id
534         vnf_name: 
535           get_param: vnf_name
536       name: 
537         get_param: vdbe_name_1
538       networks: 
539         - 
540           port: 
541             get_resource: vdbe_oam_1_port
542         - 
543           port: 
544             get_resource: vdbe_ctrl_1_port
545         - 
546           port: 
547             get_resource: vdbe_fabr_1_port
548         - 
549           port: 
550             get_resource: vdbe_1_untr_vmi_1
551         - 
552           port: 
553             get_resource: vdbe_trst_1_port
554       scheduler_hints: 
555         group: 
556           get_resource: vdbe_ServerGroup
557     type: "OS::Nova::Server"
558   vdbe_oam_0_port: 
559     properties: 
560       name: 
561         str_replace: 
562           params: 
563             DBE: 
564               get_param: vdbe_device_name
565             VM_NAME: 
566               get_param: vdbe_name_0
567           template: VM_NAMEDBE001p1n001
568       virtual_machine_interface_mac_addresses: 
569         virtual_machine_interface_mac_addresses_mac_address: 
570           - 
571             get_param: vdbe_oam_mac_0
572       virtual_network_refs: 
573         - 
574           get_param: oam_net_name
575     type: "OS::ContrailV2::VirtualMachineInterface"
576   vdbe_oam_1_port: 
577     properties: 
578       name: 
579         str_replace: 
580           params: 
581             DBE: 
582               get_param: vdbe_device_name
583             VM_NAME: 
584               get_param: vdbe_name_1
585           template: VM_NAMEDBE001p1n001
586       virtual_machine_interface_mac_addresses: 
587         virtual_machine_interface_mac_addresses_mac_address: 
588           - 
589             get_param: vdbe_oam_mac_1
590       virtual_network_refs: 
591         - 
592           get_param: oam_net_name
593     type: "OS::ContrailV2::VirtualMachineInterface"
594   vdbe_oam_Iip_0: 
595     depends_on: 
596       - vdbe_oam_0_port
597     properties: 
598       instance_ip_address: 
599         get_param: vdbe_oam_ip_0
600       virtual_machine_interface_refs: 
601         - 
602           get_resource: vdbe_oam_0_port
603       virtual_network_refs: 
604         - 
605           get_param: oam_net_name
606     type: "OS::ContrailV2::InstanceIp"
607   vdbe_oam_Iip_1: 
608     depends_on: 
609       - vdbe_oam_1_port
610     properties: 
611       instance_ip_address: 
612         get_param: vdbe_oam_ip_1
613       virtual_machine_interface_refs: 
614         - 
615           get_resource: vdbe_oam_1_port
616       virtual_network_refs: 
617         - 
618           get_param: oam_net_name
619     type: "OS::ContrailV2::InstanceIp"
620   vdbe_trst_0_port: 
621     properties: 
622       name: 
623         str_replace: 
624           params: 
625             DBE: 
626               get_param: vdbe_device_name
627             VM_NAME: 
628               get_param: vdbe_name_0
629           template: VM_NAMEDBE001p1n005
630       virtual_machine_interface_allowed_address_pairs: 
631         virtual_machine_interface_allowed_address_pairs_allowed_address_pair: 
632           - 
633             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_address_mode: 
634               get_param: aap_address_mode
635             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip: 
636               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix: 
637                 get_param: vdbe_aap_trusted_ip_prefix
638               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix_len: 
639                 get_param: vdbe_aap_trusted_ip_prefix_len
640             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_mac: 
641               get_param: vdbe_trusted_vmac_address
642           - 
643             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_address_mode: 
644               get_param: aap_address_mode
645             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip: 
646               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix: 
647                 get_param: vdbe_aap_sec_trusted_ip_prefix
648               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix_len: 
649                 get_param: vdbe_aap_sec_trusted_ip_prefix_len
650             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_mac: 
651               get_param: vdbe_hw_trst_mac_0
652           - 
653             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_address_mode: 
654               get_param: aap_address_mode
655             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip: 
656               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix: 
657                 get_param: vdbe_aap_trusted_v6_ip_prefix
658               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix_len: 
659                 get_param: vdbe_aap_trusted_v6_ip_prefix_len
660             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_mac: 
661               get_param: vdbe_trusted_vmac_address
662       virtual_machine_interface_mac_addresses: 
663         virtual_machine_interface_mac_addresses_mac_address: 
664           - 
665             get_param: vdbe_hw_trst_mac_0
666       virtual_network_refs: 
667         - 
668           get_param: trusted_net_name
669     type: "OS::ContrailV2::VirtualMachineInterface"
670   vdbe_trst_1_port: 
671     properties: 
672       name: 
673         str_replace: 
674           params: 
675             DBE: 
676               get_param: vdbe_device_name
677             VM_NAME: 
678               get_param: vdbe_name_1
679           template: VM_NAMEDBE001p1n005
680       virtual_machine_interface_allowed_address_pairs: 
681         virtual_machine_interface_allowed_address_pairs_allowed_address_pair: 
682           - 
683             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_address_mode: 
684               get_param: aap_address_mode
685             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip: 
686               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix: 
687                 get_param: vdbe_aap_trusted_ip_prefix
688               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix_len: 
689                 get_param: vdbe_aap_trusted_ip_prefix_len
690             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_mac: 
691               get_param: vdbe_trusted_vmac_address
692           - 
693             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_address_mode: 
694               get_param: aap_address_mode
695             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip: 
696               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix: 
697                 get_param: vdbe_aap_sec_trusted_ip_prefix
698               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix_len: 
699                 get_param: vdbe_aap_sec_trusted_ip_prefix_len
700             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_mac: 
701               get_param: vdbe_hw_trst_mac_1
702           - 
703             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_address_mode: 
704               get_param: aap_address_mode
705             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip: 
706               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix: 
707                 get_param: vdbe_aap_trusted_v6_ip_prefix
708               virtual_machine_interface_allowed_address_pairs_allowed_address_pair_ip_ip_prefix_len: 
709                 get_param: vdbe_aap_trusted_v6_ip_prefix_len
710             virtual_machine_interface_allowed_address_pairs_allowed_address_pair_mac: 
711               get_param: vdbe_trusted_vmac_address
712       virtual_machine_interface_mac_addresses: 
713         virtual_machine_interface_mac_addresses_mac_address: 
714           - 
715             get_param: vdbe_hw_trst_mac_1
716       virtual_network_refs: 
717         - 
718           get_param: trusted_net_name
719     type: "OS::ContrailV2::VirtualMachineInterface"
720   vdbe_trusted_Iip_0: 
721     depends_on: 
722       - vdbe_trst_0_port
723     properties: 
724       instance_ip_address: 
725         get_param: vdbe_trusted_ip_0
726       virtual_machine_interface_refs: 
727         - 
728           get_resource: vdbe_trst_0_port
729       virtual_network_refs: 
730         - 
731           get_param: trusted_net_name
732     type: "OS::ContrailV2::InstanceIp"
733   vdbe_trusted_Iip_1: 
734     depends_on: 
735       - vdbe_trst_1_port
736     properties: 
737       instance_ip_address: 
738         get_param: vdbe_trusted_ip_1
739       virtual_machine_interface_refs: 
740         - 
741           get_resource: vdbe_trst_1_port
742       virtual_network_refs: 
743         - 
744           get_param: trusted_net_name
745     type: "OS::ContrailV2::InstanceIp"
746   vdbe_trusted_v6_Iip_0: 
747     depends_on: 
748       - vdbe_trst_0_port
749     properties: 
750       instance_ip_address: 
751         get_param: vdbe_trusted_v6_ip_0
752       instance_ip_family: v6
753       virtual_machine_interface_refs: 
754         - 
755           get_resource: vdbe_trst_0_port
756       virtual_network_refs: 
757         - 
758           get_param: trusted_net_name
759     type: "OS::ContrailV2::InstanceIp"
760   vdbe_trusted_v6_Iip_1: 
761     depends_on: 
762       - vdbe_trst_1_port
763     properties: 
764       instance_ip_address: 
765         get_param: vdbe_trusted_v6_ip_1
766       instance_ip_family: v6
767       virtual_machine_interface_refs: 
768         - 
769           get_resource: vdbe_trst_1_port
770       virtual_network_refs: 
771         - 
772           get_param: trusted_net_name
773     type: "OS::ContrailV2::InstanceIp"
774   vdbe_untr_0_subports: 
775     depends_on: vdbe_0_untr_vmi_0
776     properties: 
777       count: 
778         get_param: untrusted_num_vn
779       resource_def: 
780         properties: 
781           aap_address_mode: 
782             get_param: aap_address_mode
783           aap_sec_untrusted_ip_prefix: 
784             get_param: vdbe_aap_sec_untrusted_ip_prefix
785           aap_sec_untrusted_ip_prefix_len: 
786             get_param: vdbe_aap_sec_untrusted_ip_prefix_len
787           aap_untrusted_ip_prefix: 
788             get_param: vdbe_aap_untrusted_ip_prefix
789           aap_untrusted_ip_prefix_len: 
790             get_param: vdbe_aap_untrusted_ip_prefix_len
791           aap_untrusted_v6_ip_prefix: 
792             get_param: vdbe_aap_untrusted_v6_ip_prefix
793           aap_untrusted_v6_ip_prefix_len: 
794             get_param: vdbe_aap_untrusted_v6_ip_prefix_len
795           counter: "%index%"
796           ip_address: 
797             get_param: vdbe_untrusted_ip_0
798           ip_v6_address: 
799             get_param: vdbe_untrusted_v6_ip_0
800           mac_address: 
801             get_param: vdbe_hw_untr_mac_0
802           parent_interface: 
803             get_resource: vdbe_0_untr_vmi_0
804           subinterfaces_name_prefix: 
805             str_replace: 
806               params: 
807                 DBE: 
808                   get_param: vdbe_device_name
809                 VM_NAME: 
810                   get_param: vdbe_name_0
811               template: VM_NAMEDBE001p1n004
812           vlan_tag_list: 
813             get_param: untrusted_vlan_tags
814           vmac_address: 
815             get_param: vdbe_untrusted_vmac_address
816           vn_network_list: 
817             get_param: untrusted_vn_networks
818         type: vdbeav_subinterface_heat_template.yaml
819     type: "OS::Heat::ResourceGroup"
820   vdbe_untr_1_subports: 
821     depends_on: vdbe_1_untr_vmi_1
822     properties: 
823       count: 
824         get_param: untrusted_num_vn
825       resource_def: 
826         properties: 
827           aap_address_mode: 
828             get_param: aap_address_mode
829           aap_sec_untrusted_ip_prefix: 
830             get_param: vdbe_aap_sec_untrusted_ip_prefix
831           aap_sec_untrusted_ip_prefix_len: 
832             get_param: vdbe_aap_sec_untrusted_ip_prefix_len
833           aap_untrusted_ip_prefix: 
834             get_param: vdbe_aap_untrusted_ip_prefix
835           aap_untrusted_ip_prefix_len: 
836             get_param: vdbe_aap_untrusted_ip_prefix_len
837           aap_untrusted_v6_ip_prefix: 
838             get_param: vdbe_aap_untrusted_v6_ip_prefix
839           aap_untrusted_v6_ip_prefix_len: 
840             get_param: vdbe_aap_untrusted_v6_ip_prefix_len
841           counter: "%index%"
842           ip_address: 
843             get_param: vdbe_untrusted_ip_1
844           ip_v6_address: 
845             get_param: vdbe_untrusted_v6_ip_1
846           mac_address: 
847             get_param: vdbe_hw_untr_mac_1
848           parent_interface: 
849             get_resource: vdbe_1_untr_vmi_1
850           subinterfaces_name_prefix: 
851             str_replace: 
852               params: 
853                 DBE: 
854                   get_param: vdbe_device_name
855                 VM_NAME: 
856                   get_param: vdbe_name_1
857               template: VM_NAMEDBE001p1n004
858           vlan_tag_list: 
859             get_param: untrusted_vlan_tags
860           vmac_address: 
861             get_param: vdbe_untrusted_vmac_address
862           vn_network_list: 
863             get_param: untrusted_vn_networks
864         type: vdbeav_subinterface_heat_template.yaml
865     type: "OS::Heat::ResourceGroup"
866   vdbe_untrusted_Iip_0: 
867     depends_on: 
868       - vdbe_0_untr_vmi_0
869     properties: 
870       instance_ip_address: 
871         get_param: vdbe_untrusted_ip_0
872       virtual_machine_interface_refs: 
873         - 
874           get_resource: vdbe_0_untr_vmi_0
875       virtual_network_refs: 
876         - 
877           get_param: untrusted_net_name
878     type: "OS::ContrailV2::InstanceIp"
879   vdbe_untrusted_Iip_1: 
880     depends_on: 
881       - vdbe_1_untr_vmi_1
882     properties: 
883       instance_ip_address: 
884         get_param: vdbe_untrusted_ip_1
885       virtual_machine_interface_refs: 
886         - 
887           get_resource: vdbe_1_untr_vmi_1
888       virtual_network_refs: 
889         - 
890           get_param: untrusted_net_name
891     type: "OS::ContrailV2::InstanceIp"
892   vdbe_untrusted_v6_Iip_0: 
893     depends_on: 
894       - vdbe_0_untr_vmi_0
895     properties: 
896       instance_ip_address: 
897         get_param: vdbe_untrusted_v6_ip_0
898       instance_ip_family: v6
899       virtual_machine_interface_refs: 
900         - 
901           get_resource: vdbe_0_untr_vmi_0
902       virtual_network_refs: 
903         - 
904           get_param: untrusted_net_name
905     type: "OS::ContrailV2::InstanceIp"
906   vdbe_untrusted_v6_Iip_1: 
907     depends_on: 
908       - vdbe_1_untr_vmi_1
909     properties: 
910       instance_ip_address: 
911         get_param: vdbe_untrusted_v6_ip_1
912       instance_ip_family: v6
913       virtual_machine_interface_refs: 
914         - 
915           get_resource: vdbe_1_untr_vmi_1
916       virtual_network_refs: 
917         - 
918           get_param: untrusted_net_name
919     type: "OS::ContrailV2::InstanceIp"