blob: 6eae1ff185bc0367806f9f1861dba418032183ec (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
|
tosca_definitions_version: tosca_simple_yaml_1_0_0
metadata:
template_name: Main
imports:
ContrailComputeGlobalTypes:
file: ContrailComputeGlobalTypesServiceTemplate.yaml
CinderVolumeGlobalTypes:
file: CinderVolumeGlobalTypesServiceTemplate.yaml
ContrailVirtualNetworkGlobalType:
file: ContrailVirtualNetworkGlobalTypeServiceTemplate.yaml
AbstractSubstituteGlobalTypes:
file: AbstractSubstituteGlobalTypesServiceTemplate.yaml
ContrailPortGlobalTypes:
file: ContrailPortGlobalTypesServiceTemplate.yaml
GlobalSubstitutionTypes:
file: GlobalSubstitutionTypesServiceTemplate.yaml
NeutronPortGlobalTypes:
file: NeutronPortGlobalTypesServiceTemplate.yaml
NeutronNetGlobalTypes:
file: NeutronNetGlobalTypesServiceTemplate.yaml
CommonGlobalTypes:
file: CommonGlobalTypesServiceTemplate.yaml
ContrailAbstractSubstituteGlobalTypes:
file: ContrailAbstractSubstituteGlobalTypesServiceTemplate.yaml
ContrailNetworkRuleGlobalType:
file: ContrailNetworkRuleGlobalTypeServiceTemplate.yaml
NeutronSecurityRulesGlobalTypes:
file: NeutronSecurityRulesGlobalTypesServiceTemplate.yaml
NovaServerGlobalTypes:
file: NovaServerGlobalTypesServiceTemplate.yaml
ContrailV2VirtualMachineInterfaceGlobalType:
file: ContrailV2VirtualMachineInterfaceGlobalTypeServiceTemplate.yaml
topology_template:
inputs:
vf_module_id:
hidden: false
immutable: false
type: string
description: Unique ID for this VF module instance
dns_int_bearer_ips:
hidden: false
immutable: false
type: list
description: DNS Bearer IP list
entry_schema:
type: string
vnf_name:
hidden: false
immutable: false
type: string
description: Unique name for this VF instance
oam_protected_net_name:
hidden: false
immutable: false
type: string
description: OAM network where instaces will connect
dns_oam_protected_ips:
hidden: false
immutable: false
type: list
description: DNS OAM IP list
entry_schema:
type: string
dns_key:
hidden: false
immutable: false
type: string
description: creator's ssh public key
int_bearer_net_name:
hidden: false
immutable: false
type: string
description: Bearer network where instaces will connect
route_eth0:
hidden: false
immutable: false
type: string
description: OAM network routes
vnf_id:
hidden: false
immutable: false
type: string
description: Unique ID for this VF instance
availability_zone_0:
hidden: false
immutable: false
type: string
description: availability zone ID or Name
DNS_shared_sec_grp_id:
hidden: false
immutable: false
type: string
description: security group UUID
node_count:
hidden: false
immutable: false
type: float
description: the number of DNS nested instances
default: 4
dns_image_name:
hidden: false
immutable: false
type: string
description: operative system image
default: NIMBUS_DNS_3.0.2.qcow2
dns_int_bearer_ipv6_ips:
hidden: false
immutable: false
type: list
description: fixed IP assignment for VM's on the Bearer network
entry_schema:
type: string
dns_server_names:
hidden: false
immutable: false
type: list
description: DNS VM server name list
entry_schema:
type: string
dns_flavor_name:
hidden: false
immutable: false
type: string
description: resources to by appplied on instances
default: nv.c4r4d80
node_templates:
dns_server_group_az:
type: org.openecomp.resource.abstract.nodes.heat.dns_nested_01
directives:
- substitutable
properties:
vf_module_id:
get_input: vf_module_id
name_with_index:
concat:
- name_
- get_property:
- SELF
- service_template_filter
- index_value
dns_int_bearer_ips:
get_input: dns_int_bearer_ips
vnf_name:
get_input: vnf_name
index:
get_property:
- SELF
- service_template_filter
- index_value
security_group:
get_input: DNS_shared_sec_grp_id
oam_protected_net_name:
get_input: oam_protected_net_name
dns_oam_protected_ips:
get_input: dns_oam_protected_ips
dns_key:
get_input: dns_key
int_bearer_net_name:
get_input: int_bearer_net_name
route_eth0:
get_input: route_eth0
service_template_filter:
substitute_service_template: dns_nested_01ServiceTemplate.yaml
count:
get_input: node_count
mandatory: false
dns_names:
get_input: dns_server_names
vnf_id:
get_input: vnf_id
availability_zone_0:
get_input: availability_zone_0
dns_image_name:
get_input: dns_image_name
dns_int_bearer_ipv6_ips:
get_input: dns_int_bearer_ipv6_ips
dns_flavor_name:
get_input: dns_flavor_name
DNS_SECURITY_GROUP:
type: org.openecomp.resource.vfc.rules.nodes.heat.network.neutron.SecurityRules
properties:
name:
str_replace:
template: VF_NAME_sec_grp_DNS
params:
VF_NAME:
get_input: vnf_name
description: vscp security group
rules:
- protocol: tcp
ethertype: IPv4
port_range_max: 65535
remote_ip_prefix: 0.0.0.0/0
direction: egress
port_range_min: 1
- protocol: udp
ethertype: IPv4
port_range_max: 65535
remote_ip_prefix: 0.0.0.0/0
direction: egress
port_range_min: 1
- protocol: icmp
ethertype: IPv4
remote_ip_prefix: 0.0.0.0/0
direction: egress
- protocol: tcp
ethertype: IPv4
port_range_max: 65535
remote_ip_prefix: 0.0.0.0/0
direction: ingress
port_range_min: 1
- protocol: udp
ethertype: IPv4
port_range_max: 65535
remote_ip_prefix: 0.0.0.0/0
direction: ingress
port_range_min: 1
- protocol: icmp
ethertype: IPv4
remote_ip_prefix: 0.0.0.0/0
direction: ingress
requirements:
- port:
capability: attachment_dns_int_bearer_0_port
node: dns_server_group_az
relationship: org.openecomp.relationships.AttachesTo
- port:
capability: attachment_dns_oam_protected_0_port
node: dns_server_group_az
relationship: org.openecomp.relationships.AttachesTo
groups:
base_dns:
type: org.openecomp.groups.heat.HeatStack
properties:
heat_file: ../Artifacts/base_dns.yaml
description: |
Base HOT template to create The Security Group for the the DNS VNF
members:
- DNS_SECURITY_GROUP
dns_az_01:
type: org.openecomp.groups.heat.HeatStack
properties:
heat_file: ../Artifacts/dns_az_01.yaml
description: DNS master template
members:
- dns_server_group_az
|
