gerrit.onap Code Review - sdc.git/blob

   1 tosca_definitions_version: tosca_simple_yaml_1_0_0
   2 metadata:
   3   template_name: OCS-fw
   4 imports:
   5 - openecomp_heat_index:
   6     file: openecomp-heat/_index.yml
   7 - GlobalSubstitutionTypes:
   8     file: GlobalSubstitutionTypesServiceTemplate.yaml
   9 topology_template:
  10   inputs:
  11     service_policy_name:
  12       hidden: false
  13       immutable: false
  14       type: string
  15       description: Policy Name
  16     st_static_routes_list:
  17       hidden: false
  18       immutable: false
  19       type: string
  20       description: List of static routes enabled-disabled
  21     st_type:
  22       hidden: false
  23       immutable: false
  24       type: string
  25       description: service type
  26     st_service_interface_type_list:
  27       hidden: false
  28       immutable: false
  29       type: string
  30       description: List of interface types
  31     st_mode:
  32       hidden: false
  33       immutable: false
  34       type: string
  35       description: service mode
  36     Cricket_OCS_protected_net_id:
  37       hidden: false
  38       immutable: false
  39       type: string
  40       description: Name of Cricket OCS network
  41     oam_mgmt_net_0_id:
  42       hidden: false
  43       immutable: false
  44       type: string
  45       description: Name of OAM network
  46     start_dst_ports:
  47       hidden: false
  48       immutable: false
  49       type: float
  50       description: Start of dst port
  51     st_flavor:
  52       hidden: false
  53       immutable: false
  54       type: string
  55       description: Flavor
  56     availability_zone_1:
  57       hidden: false
  58       immutable: false
  59       type: string
  60       description: availability zone
  61     service_instance_name:
  62       hidden: false
  63       immutable: false
  64       type: string
  65       description: Service instance name
  66     st_scaling:
  67       hidden: false
  68       immutable: false
  69       type: string
  70       description: Indicates whether service scaling is enabled
  71     max_num_fw_instances:
  72       hidden: false
  73       immutable: false
  74       type: float
  75       description: maximum number of firewall instances for scaling
  76     start_src_ports:
  77       hidden: false
  78       immutable: false
  79       type: float
  80       description: Start of src port
  81     network_param2:
  82       hidden: false
  83       immutable: false
  84       type: string
  85     service_policy_direction:
  86       hidden: false
  87       immutable: false
  88       type: string
  89       description: Direction of Policy
  90     network_param1:
  91       hidden: false
  92       immutable: false
  93       type: string
  94     st_name:
  95       hidden: false
  96       immutable: false
  97       type: string
  98       description: Name of service template
  99     hsl_direct_net3:
 100       hidden: false
 101       immutable: false
 102       type: string
 103     hsl_direct_net4:
 104       hidden: false
 105       immutable: false
 106       type: string
 107     HSL_direct_net_gateway:
 108       hidden: false
 109       immutable: false
 110       type: string
 111       description: HSL (Logging) network gateway address
 112     hsl_direct_net1:
 113       hidden: false
 114       immutable: false
 115       type: string
 116     hsl_direct_net2:
 117       hidden: false
 118       immutable: false
 119       type: string
 120     st_shared_ip_list:
 121       hidden: false
 122       immutable: false
 123       type: string
 124       description: List of shared ip enabled-disabled
 125     Cricket_OCS_direct_net_id:
 126       hidden: false
 127       immutable: false
 128       type: string
 129       description: Name of Cricket OCS network
 130     end_src_ports:
 131       hidden: false
 132       immutable: false
 133       type: float
 134       description: End of src port
 135     end_dst_ports:
 136       hidden: false
 137       immutable: false
 138       type: float
 139       description: End of dst port
 140     st_image_name:
 141       hidden: false
 142       immutable: false
 143       type: string
 144       description: Name of the image
 145     HSL_direct_net_id:
 146       hidden: false
 147       immutable: false
 148       type: string
 149       description: Name of HSL (Logging) network
 150     HSL_direct_net_cidr:
 151       hidden: false
 152       immutable: false
 153       type: string
 154       description: HSL (Logging) network address (CIDR notation)
 155   node_templates:
 156     service_instance2:
 157       type: org.openecomp.resource.abstract.nodes.heat.service_template
 158       directives:
 159       - substitutable
 160       properties:
 161         flavor:
 162           get_input: st_flavor
 163         availability_zone:
 164           get_input: availability_zone_1
 165         image_name:
 166           get_input: st_image_name
 167         service_template_filter:
 168           substitute_service_template: OCS-fw_service_instance2ServiceTemplate.yaml
 169           count:
 170             get_input: max_num_fw_instances
 171           scaling_enabled:
 172             get_input: st_scaling
 173           mandatory: false
 174         service_type:
 175           get_input: st_type
 176         static_routes_list:
 177         - token:
 178           - get_input: st_static_routes_list
 179           - ','
 180           - 0
 181         - token:
 182           - get_input: st_static_routes_list
 183           - ','
 184           - 1
 185         - token:
 186           - get_input: st_static_routes_list
 187           - ','
 188           - 2
 189         service_template_name:
 190           get_input: st_name
 191         service_interface_type_list:
 192         - token:
 193           - get_input: st_service_interface_type_list
 194           - ','
 195           - 0
 196         - token:
 197           - get_input: st_service_interface_type_list
 198           - ','
 199           - 1
 200         - token:
 201           - get_input: st_service_interface_type_list
 202           - ','
 203           - 2
 204         service_instance_name:
 205           get_input: service_instance_name
 206         interface_list:
 207         - virtual_network:
 208             get_input: network_param2
 209         - virtual_network:
 210             get_input: network_param1
 211         - virtual_network:
 212             get_input: network_param2
 213         service_mode:
 214           get_input: st_mode
 215         shared_ip_list:
 216         - token:
 217           - get_input: st_shared_ip_list
 218           - ','
 219           - 0
 220         - token:
 221           - get_input: st_shared_ip_list
 222           - ','
 223           - 1
 224         - token:
 225           - get_input: st_shared_ip_list
 226           - ','
 227           - 2
 228       requirements:
 229       - dependency:
 230           capability: tosca.capabilities.Node
 231           node: hsl_direct_net
 232           relationship: tosca.relationships.DependsOn
 233     service_instance1:
 234       type: org.openecomp.resource.abstract.nodes.heat.service_template
 235       directives:
 236       - substitutable
 237       properties:
 238         flavor:
 239           get_input: st_flavor
 240         availability_zone:
 241           get_input: availability_zone_1
 242         image_name:
 243           get_input: st_image_name
 244         service_template_filter:
 245           substitute_service_template: OCS-fw_service_instance1ServiceTemplate.yaml
 246           count:
 247             get_input: max_num_fw_instances
 248           scaling_enabled:
 249             get_input: st_scaling
 250           mandatory: false
 251         service_type:
 252           get_input: st_type
 253         static_routes_list:
 254         - token:
 255           - get_input: st_static_routes_list
 256           - ','
 257           - 0
 258         - token:
 259           - get_input: st_static_routes_list
 260           - ','
 261           - 1
 262         - token:
 263           - get_input: st_static_routes_list
 264           - ','
 265           - 2
 266         service_template_name:
 267           get_input: st_name
 268         service_interface_type_list:
 269         - token:
 270           - get_input: st_service_interface_type_list
 271           - ','
 272           - 0
 273         - token:
 274           - get_input: st_service_interface_type_list
 275           - ','
 276           - 1
 277         - token:
 278           - get_input: st_service_interface_type_list
 279           - ','
 280           - 2
 281         service_instance_name:
 282           get_input: service_instance_name
 283         interface_list:
 284         - virtual_network:
 285             get_input: network_param1
 286         - virtual_network:
 287             get_input: network_param1
 288         - virtual_network:
 289             get_input: network_param2
 290         service_mode:
 291           get_input: st_mode
 292         shared_ip_list:
 293         - token:
 294           - get_input: st_shared_ip_list
 295           - ','
 296           - 0
 297         - token:
 298           - get_input: st_shared_ip_list
 299           - ','
 300           - 1
 301         - token:
 302           - get_input: st_shared_ip_list
 303           - ','
 304           - 2
 305       requirements:
 306       - dependency:
 307           capability: tosca.capabilities.Node
 308           node: hsl_direct_net
 309           relationship: tosca.relationships.DependsOn
 310     test_nested2:
 311       type: org.openecomp.resource.abstract.nodes.heat.OCS-fw2
 312       directives:
 313       - substitutable
 314       properties:
 315         network_param2:
 316           get_input: network_param2
 317         service_template_filter:
 318           substitute_service_template: OCS-fw2ServiceTemplate.yaml
 319         network_param1:
 320           get_input: network_param1
 321     hsl_direct_net:
 322       type: org.openecomp.resource.vl.nodes.heat.network.contrail.VirtualNetwork
 323       properties:
 324         network_name:
 325           get_input: HSL_direct_net_id
 326         subnets:
 327           hsl_ip_subnet:
 328             cidr:
 329               get_input: HSL_direct_net_cidr
 330             gateway_ip:
 331               get_input: HSL_direct_net_gateway
 332     service_policy:
 333       type: org.openecomp.resource.vfc.rules.nodes.heat.network.contrail.NetworkRules
 334       properties:
 335         entries:
 336           policy_rule:
 337           - src_ports:
 338             - start_port:
 339                 get_input: start_src_ports
 340               end_port:
 341                 get_input: end_src_ports
 342             protocol: any
 343             action_list:
 344               apply_service:
 345               - service_instance1
 346             dst_addresses:
 347             - virtual_network:
 348                 get_input: Cricket_OCS_direct_net_id
 349             dst_ports:
 350             - start_port:
 351                 get_input: start_dst_ports
 352               end_port:
 353                 get_input: end_dst_ports
 354             src_addresses:
 355             - virtual_network:
 356                 get_input: Cricket_OCS_protected_net_id
 357             direction:
 358               get_input: service_policy_direction
 359         name:
 360           get_input: service_policy_name
 361       requirements:
 362       - dependency:
 363           capability: tosca.capabilities.Node
 364           node: service_instance1
 365           relationship: tosca.relationships.DependsOn
 366   groups:
 367     OCS-fw_group:
 368       type: org.openecomp.groups.heat.HeatStack
 369       properties:
 370         heat_file: ../Artifacts/OCS-fw.yml
 371         description: |
 372           Based on the following reference for the HOT-DMZ-FW template: Version 3.5 8-10-2015 (Authors: Art Mishurov,am254u & Johhny Chen, jc3066) - HOT-DMZ-FW template that creates two DMZ networks (direct and protected) with a scaled out firewall service between the two.
 373       members:
 374       - service_instance2
 375       - service_instance1
 376       - test_nested2
 377       - hsl_direct_net
 378       - service_policy
 379   substitution_mappings:
 380     node_type: org.openecomp.resource.abstract.nodes.heat.OCS-fw
 381     capabilities:
 382       feature_service_instance1:
 383       - service_instance1
 384       - feature
 385       attachment_hsl_direct_net_3_test_nested3_test_nested2:
 386       - test_nested2
 387       - attachment_hsl_direct_net_3_test_nested3
 388       feature_service_instance2:
 389       - service_instance2
 390       - feature
 391       feature_test_nested3_test_nested2:
 392       - test_nested2
 393       - feature_test_nested3
 394       end_point_hsl_direct_net_3_test_nested3_test_nested2:
 395       - test_nested2
 396       - end_point_hsl_direct_net_3_test_nested3
 397       attachment_hsl_direct_net:
 398       - hsl_direct_net
 399       - attachment
 400       feature_service_instance4_test_nested3_test_nested2:
 401       - test_nested2
 402       - feature_service_instance4_test_nested3
 403       end_point_hsl_direct_net_2_test_nested2:
 404       - test_nested2
 405       - end_point_hsl_direct_net_2
 406       feature_service_instance3_test_nested2:
 407       - test_nested2
 408       - feature_service_instance3
 409       end_point_hsl_direct_net:
 410       - hsl_direct_net
 411       - end_point
 412       feature_service_policy_2_test_nested2:
 413       - test_nested2
 414       - feature_service_policy_2
 415       link_hsl_direct_net_3_test_nested3_test_nested2:
 416       - test_nested2
 417       - link_hsl_direct_net_3_test_nested3
 418       link_hsl_direct_net:
 419       - hsl_direct_net
 420       - link
 421       feature_service_policy:
 422       - service_policy
 423       - feature
 424       feature_hsl_direct_net_2_test_nested2:
 425       - test_nested2
 426       - feature_hsl_direct_net_2
 427       link_hsl_direct_net_2_test_nested2:
 428       - test_nested2
 429       - link_hsl_direct_net_2
 430       feature_test_nested2:
 431       - test_nested2
 432       - feature
 433       feature_hsl_direct_net:
 434       - hsl_direct_net
 435       - feature
 436       feature_service_policy_3_test_nested3_test_nested2:
 437       - test_nested2
 438       - feature_service_policy_3_test_nested3
 439       feature_hsl_direct_net_3_test_nested3_test_nested2:
 440       - test_nested2
 441       - feature_hsl_direct_net_3_test_nested3
 442       feature_service_instance21_test_nested2:
 443       - test_nested2
 444       - feature_service_instance21
 445       attachment_hsl_direct_net_2_test_nested2:
 446       - test_nested2
 447       - attachment_hsl_direct_net_2
 448     requirements:
 449       link_port_1_service_instance4_test_nested3_test_nested2:
 450       - test_nested2
 451       - link_port_1_service_instance4_test_nested3
 452       dependency_hsl_direct_net:
 453       - hsl_direct_net
 454       - dependency
 455       network_service_policy_3_test_nested3_test_nested2:
 456       - test_nested2
 457       - network_service_policy_3_test_nested3
 458       link_port_2_service_instance1:
 459       - service_instance1
 460       - link_port_2
 461       link_port_2_service_instance2:
 462       - service_instance2
 463       - link_port_2
 464       dependency_service_policy:
 465       - service_policy
 466       - dependency
 467       link_port_0_service_instance3_test_nested2:
 468       - test_nested2
 469       - link_port_0_service_instance3
 470       link_port_2_service_instance3_test_nested2:
 471       - test_nested2
 472       - link_port_2_service_instance3
 473       dependency_service_instance4_test_nested3_test_nested2:
 474       - test_nested2
 475       - dependency_service_instance4_test_nested3
 476       dependency_service_instance21_test_nested2:
 477       - test_nested2
 478       - dependency_service_instance21
 479       dependency_test_nested2:
 480       - test_nested2
 481       - dependency
 482       link_port_1_service_instance2:
 483       - service_instance2
 484       - link_port_1
 485       link_port_1_service_instance1:
 486       - service_instance1
 487       - link_port_1
 488       link_port_2_service_instance21_test_nested2:
 489       - test_nested2
 490       - link_port_2_service_instance21
 491       link_port_1_service_instance3_test_nested2:
 492       - test_nested2
 493       - link_port_1_service_instance3
 494       link_port_0_service_instance2:
 495       - service_instance2
 496       - link_port_0
 497       link_port_0_service_instance1:
 498       - service_instance1
 499       - link_port_0
 500       link_port_0_service_instance4_test_nested3_test_nested2:
 501       - test_nested2
 502       - link_port_0_service_instance4_test_nested3
 503       dependency_service_policy_2_test_nested2:
 504       - test_nested2
 505       - dependency_service_policy_2
 506       link_port_0_service_instance21_test_nested2:
 507       - test_nested2
 508       - link_port_0_service_instance21
 509       network_service_policy:
 510       - service_policy
 511       - network
 512       dependency_hsl_direct_net_2_test_nested2:
 513       - test_nested2
 514       - dependency_hsl_direct_net_2
 515       dependency_hsl_direct_net_3_test_nested3_test_nested2:
 516       - test_nested2
 517       - dependency_hsl_direct_net_3_test_nested3
 518       dependency_service_policy_3_test_nested3_test_nested2:
 519       - test_nested2
 520       - dependency_service_policy_3_test_nested3
 521       dependency_service_instance3_test_nested2:
 522       - test_nested2
 523       - dependency_service_instance3
 524       link_port_1_service_instance21_test_nested2:
 525       - test_nested2
 526       - link_port_1_service_instance21
 527       network_service_policy_2_test_nested2:
 528       - test_nested2
 529       - network_service_policy_2
 530       dependency_test_nested3_test_nested2:
 531       - test_nested2
 532       - dependency_test_nested3
 533       dependency_service_instance2:
 534       - service_instance2
 535       - dependency
 536       link_port_2_service_instance4_test_nested3_test_nested2:
 537       - test_nested2
 538       - link_port_2_service_instance4_test_nested3
 539       dependency_service_instance1:
 540       - service_instance1
 541       - dependency