# ============LICENSE_START========================================== # =================================================================== # Copyright © 2017 AT&T # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. #============LICENSE_END============================================ tosca_definitions_version: cloudify_dsl_1_3 description: > This blueprint creates a Kubernetes Cluster. It is based on this documentation: https://kubernetes.io/docs/getting-started-guides/kubeadm/ imports: - https://raw.githubusercontent.com/cloudify-cosmo/cloudify-manager/4.1/resources/rest-service/cloudify/types/types.yaml - https://raw.githubusercontent.com/cloudify-cosmo/cloudify-openstack-plugin/2.2.0/plugin.yaml - https://raw.githubusercontent.com/cloudify-incubator/cloudify-utilities-plugin/1.2.5/plugin.yaml - https://raw.githubusercontent.com/cloudify-cosmo/cloudify-fabric-plugin/1.5/plugin.yaml - https://raw.githubusercontent.com/cloudify-cosmo/cloudify-diamond-plugin/1.3.5/plugin.yaml - imports/cloud-config.yaml - imports/kubernetes.yaml inputs: image: description: Image to be used when launching agent VMs default: { get_secret: centos_core_image } flavor: description: Flavor of the agent VMs default: { get_secret: large_image_flavor } agent_user: description: > User for connecting to agent VMs default: centos dsl_definitions: openstack_config: &openstack_config username: { get_secret: keystone_username } password: { get_secret: keystone_password } tenant_name: { get_secret: keystone_tenant_name } auth_url: { get_secret: keystone_url } region: { get_secret: region } node_templates: nfs_server: type: cloudify.nodes.SoftwareComponent properties: interfaces: cloudify.interfaces.lifecycle: start: implementation: fabric.fabric_plugin.tasks.run_script inputs: script_path: scripts/nfs.sh use_sudo: true process: args: fabric_env: host_string: { get_attribute: [ kubernetes_master_host, ip ] } user: { get_input: agent_user } key: { get_secret: agent_key_private } relationships: - type: cloudify.relationships.contained_in target: kubernetes_master_host kubernetes_master_host: type: cloudify.openstack.nodes.Server properties: openstack_config: *openstack_config agent_config: user: { get_input: agent_user } install_method: remote port: 22 key: { get_secret: agent_key_private } server: key_name: '' image: '' flavor: '' management_network_name: { get_property: [ public_network, resource_id ] } interfaces: cloudify.interfaces.lifecycle: create: inputs: args: image: { get_input: image } flavor: { get_input: flavor } userdata: { get_attribute: [ cloudify_host_cloud_config, cloud_config ] } relationships: - target: kubernetes_master_port type: cloudify.openstack.server_connected_to_port - type: cloudify.relationships.depends_on target: cloudify_host_cloud_config kubernetes_node_host: type: cloudify.openstack.nodes.Server properties: openstack_config: *openstack_config agent_config: user: { get_input: agent_user } install_method: remote port: 22 key: { get_secret: agent_key_private } server: key_name: '' image: '' flavor: '' management_network_name: { get_property: [ private_network, resource_id ] } relationships: - type: cloudify.relationships.contained_in target: k8s_node_scaling_tier - target: kubernetes_node_port type: cloudify.openstack.server_connected_to_port interfaces: cloudify.interfaces.lifecycle: create: inputs: args: image: { get_input: image } flavor: { get_input: flavor } userdata: { get_attribute: [ cloudify_host_cloud_config, cloud_config ] } cloudify.interfaces.monitoring_agent: install: implementation: diamond.diamond_agent.tasks.install inputs: diamond_config: interval: 1 start: diamond.diamond_agent.tasks.start stop: diamond.diamond_agent.tasks.stop uninstall: diamond.diamond_agent.tasks.uninstall cloudify.interfaces.monitoring: start: implementation: diamond.diamond_agent.tasks.add_collectors inputs: collectors_config: CPUCollector: {} MemoryCollector: {} LoadAverageCollector: {} DiskUsageCollector: config: devices: x?vd[a-z]+[0-9]*$ NetworkCollector: {} ProcessResourcesCollector: config: enabled: true unit: B measure_collector_time: true cpu_interval: 0.5 process: hyperkube: name: hyperkube kubernetes_security_group: type: cloudify.openstack.nodes.SecurityGroup properties: openstack_config: *openstack_config security_group: name: kubernetes_security_group description: kubernetes master security group rules: - remote_ip_prefix: 0.0.0.0/0 port_range_min: 1 port_range_max: 65535 protocol: tcp direction: ingress ethertype: IPv4 - remote_ip_prefix: 0.0.0.0/0 port_range_min: 1 port_range_max: 65535 protocol: tcp direction: egress ethertype: IPv4 - remote_ip_prefix: 0.0.0.0/0 port_range_min: 1 port_range_max: 65535 protocol: udp direction: ingress ethertype: IPv4 - remote_ip_prefix: 0.0.0.0/0 port_range_min: 1 port_range_max: 65535 protocol: udp direction: egress ethertype: IPv4 kubernetes_master_port: type: cloudify.openstack.nodes.Port properties: openstack_config: *openstack_config relationships: - type: cloudify.relationships.contained_in target: public_network - type: cloudify.relationships.depends_on target: public_subnet - type: cloudify.openstack.port_connected_to_security_group target: kubernetes_security_group - type: cloudify.openstack.port_connected_to_floating_ip target: kubernetes_master_ip kubernetes_node_port: type: cloudify.openstack.nodes.Port properties: openstack_config: *openstack_config relationships: - type: cloudify.relationships.contained_in target: k8s_node_scaling_tier - type: cloudify.relationships.connected_to target: private_network - type: cloudify.relationships.depends_on target: private_subnet - type: cloudify.openstack.port_connected_to_security_group target: kubernetes_security_group private_subnet: type: cloudify.openstack.nodes.Subnet properties: openstack_config: *openstack_config use_external_resource: true resource_id: { get_secret: private_subnet_name } relationships: - target: private_network type: cloudify.relationships.contained_in private_network: type: cloudify.openstack.nodes.Network properties: openstack_config: *openstack_config use_external_resource: true resource_id: { get_secret: private_network_name } public_subnet: type: cloudify.openstack.nodes.Subnet properties: openstack_config: *openstack_config use_external_resource: true resource_id: { get_secret: public_subnet_name } relationships: - target: public_network type: cloudify.relationships.contained_in - target: router type: cloudify.openstack.subnet_connected_to_router public_network: type: cloudify.openstack.nodes.Network properties: openstack_config: *openstack_config use_external_resource: true resource_id: { get_secret: public_network_name } router: type: cloudify.openstack.nodes.Router properties: openstack_config: *openstack_config use_external_resource: true resource_id: { get_secret: router_name } relationships: - target: external_network type: cloudify.relationships.connected_to external_network: type: cloudify.openstack.nodes.Network properties: openstack_config: *openstack_config use_external_resource: true resource_id: { get_secret: external_network_name } k8s_node_scaling_tier: type: cloudify.nodes.Root kubernetes_master_ip: type: cloudify.openstack.nodes.FloatingIP properties: openstack_config: *openstack_config floatingip: floating_network_name: { get_property: [ external_network, resource_id ] } groups: k8s_node_group: members: - kubernetes_node_host - kubernetes_node_port policies: kubernetes_node_vms_scaling_policy: type: cloudify.policies.scaling properties: default_instances: 6 targets: [k8s_node_group] outputs: kubernetes_master_public_ip: value: { get_attribute: [ kubernetes_master_ip, floating_ip_address ] }