tosca_definitions_version: tosca_simple_yaml_1_0_0
metadata:
  template_name: Main
imports:
- openecomp_heat_index:
    file: openecomp-heat/_index.yml
- GlobalSubstitutionTypes:
    file: GlobalSubstitutionTypesServiceTemplate.yaml
topology_template:
  inputs:
    security_group_name:
      label: security group name
      hidden: false
      immutable: false
      type: string
      description: the name of security group
    shared_security_group_id2:
      hidden: false
      immutable: false
      type: string
      description: network name of jsa log network
    jsa_net_name:
      hidden: false
      immutable: false
      type: string
      description: network name of jsa log network
    shared_security_group_id1:
      hidden: false
      immutable: false
      type: string
      description: network name of jsa log network
  node_templates:
    jsa_security_group1:
      type: org.openecomp.resource.vfc.rules.nodes.heat.network.neutron.SecurityRules
      properties:
        name:
          get_input: security_group_name
        description: ems security group
        rules:
        - protocol: tcp
          ethertype: IPv4
          port_range_max: 65535
          remote_ip_prefix: 0.0.0.0/0
          direction: egress
          port_range_min: 1
        - protocol: udp
          ethertype: IPv4
          port_range_max: 65535
          remote_ip_prefix: 0.0.0.0/0
          direction: egress
          port_range_min: 1
        - protocol: icmp
          ethertype: IPv4
          remote_ip_prefix: 0.0.0.0/0
          direction: egress
        - protocol: tcp
          ethertype: IPv6
          port_range_max: 65535
          remote_ip_prefix: ::/0
          direction: egress
          port_range_min: 1
        - protocol: udp
          ethertype: IPv6
          port_range_max: 65535
          remote_ip_prefix: ::/0
          direction: egress
          port_range_min: 1
        - protocol: icmp
          ethertype: IPv6
          remote_ip_prefix: ::/0
          direction: egress
        - protocol: tcp
          ethertype: IPv4
          port_range_max: 65535
          remote_ip_prefix: 0.0.0.0/0
          direction: ingress
          port_range_min: 1
        - protocol: udp
          ethertype: IPv4
          port_range_max: 65535
          remote_ip_prefix: 0.0.0.0/0
          direction: ingress
          port_range_min: 1
        - protocol: icmp
          ethertype: IPv4
          remote_ip_prefix: 0.0.0.0/0
          direction: ingress
        - protocol: tcp
          ethertype: IPv6
          port_range_max: 65535
          remote_ip_prefix: ::/0
          direction: ingress
          port_range_min: 1
        - protocol: udp
          ethertype: IPv6
          port_range_max: 65535
          remote_ip_prefix: ::/0
          direction: ingress
          port_range_min: 1
        - protocol: icmp
          ethertype: IPv6
          remote_ip_prefix: ::/0
          direction: ingress
      requirements:
      - port:
          capability: attachment_cmaui_port_211_test_nested2
          node: test_nested
          relationship: org.openecomp.relationships.AttachesTo
      - port:
          capability: attachment_cmaui_port_222_test_nested2
          node: test_nested
          relationship: org.openecomp.relationships.AttachesTo
      - port:
          capability: attachment_cmaui_port_311_test_nested3_test_nested2
          node: test_nested
          relationship: org.openecomp.relationships.AttachesTo
      - port:
          capability: attachment_cmaui_port_322_test_nested3_test_nested2
          node: test_nested
          relationship: org.openecomp.relationships.AttachesTo
      - port:
          capability: attachment_cmaui_port_2
          node: test_nested
          relationship: org.openecomp.relationships.AttachesTo
      - port:
          capability: attachment_cmaui_port_1
          node: test_nested
          relationship: org.openecomp.relationships.AttachesTo
    jsa_security_group2:
      type: org.openecomp.resource.vfc.rules.nodes.heat.network.neutron.SecurityRules
      properties:
        name:
          get_input: security_group_name
        description: ems security group
        rules:
        - protocol: tcp
          ethertype: IPv4
          port_range_max: 65535
          remote_ip_prefix: 0.0.0.0/0
          direction: egress
          port_range_min: 1
        - protocol: udp
          ethertype: IPv4
          port_range_max: 65535
          remote_ip_prefix: 0.0.0.0/0
          direction: egress
          port_range_min: 1
        - protocol: icmp
          ethertype: IPv4
          remote_ip_prefix: 0.0.0.0/0
          direction: egress
        - protocol: tcp
          ethertype: IPv6
          port_range_max: 65535
          remote_ip_prefix: ::/0
          direction: egress
          port_range_min: 1
        - protocol: udp
          ethertype: IPv6
          port_range_max: 65535
          remote_ip_prefix: ::/0
          direction: egress
          port_range_min: 1
        - protocol: icmp
          ethertype: IPv6
          remote_ip_prefix: ::/0
          direction: egress
        - protocol: tcp
          ethertype: IPv4
          port_range_max: 65535
          remote_ip_prefix: 0.0.0.0/0
          direction: ingress
          port_range_min: 1
        - protocol: udp
          ethertype: IPv4
          port_range_max: 65535
          remote_ip_prefix: 0.0.0.0/0
          direction: ingress
          port_range_min: 1
        - protocol: icmp
          ethertype: IPv4
          remote_ip_prefix: 0.0.0.0/0
          direction: ingress
        - protocol: tcp
          ethertype: IPv6
          port_range_max: 65535
          remote_ip_prefix: ::/0
          direction: ingress
          port_range_min: 1
        - protocol: udp
          ethertype: IPv6
          port_range_max: 65535
          remote_ip_prefix: ::/0
          direction: ingress
          port_range_min: 1
        - protocol: icmp
          ethertype: IPv6
          remote_ip_prefix: ::/0
          direction: ingress
      requirements:
      - port:
          capability: attachment_cmaui_port_211_test_nested2
          node: test_nested
          relationship: org.openecomp.relationships.AttachesTo
      - port:
          capability: attachment_cmaui_port_311_test_nested3_test_nested2
          node: test_nested
          relationship: org.openecomp.relationships.AttachesTo
      - port:
          capability: attachment_cmaui_port_1
          node: test_nested
          relationship: org.openecomp.relationships.AttachesTo
    test_nested:
      type: org.openecomp.resource.abstract.nodes.heat.nested
      directives:
      - substitutable
      properties:
        service_template_filter:
          substitute_service_template: nestedServiceTemplate.yaml
        p2:
          get_input: shared_security_group_id2
        shared_security_group_id1:
          get_input: shared_security_group_id1
  groups:
    base_group:
      type: org.openecomp.groups.heat.HeatStack
      properties:
        heat_file: ../Artifacts/base.yml
        description: |
          Version 2.0 02-09-2016 (Authors: John Doe, user PROD)
      members:
      - jsa_security_group1
      - jsa_security_group2
    addOn_group:
      type: org.openecomp.groups.heat.HeatStack
      properties:
        heat_file: ../Artifacts/addOn.yml
        description: |
          Version 2.0 02-09-2016 (Authors: John Doe, user PROD)
      members:
      - test_nested