567b258aa0
Added a new resource "server_security_group" for adding the security rules to server. Added the property "security_groups" for each servers. Now able to ping the created server with its floating IP. Change-Id: Ic801d9fc6c933f022cc0997a69a96fcc68057ba9 Implements: security group rule Closes-Bug: #1309082
104 lines
3.0 KiB
YAML
104 lines
3.0 KiB
YAML
heat_template_version: 2013-05-23
|
|
|
|
description: >
|
|
HOT template to deploy two servers into an existing neutron tenant network and
|
|
assign floating IP addresses to each server so they are routable from the
|
|
public network.
|
|
|
|
parameters:
|
|
key_name:
|
|
type: string
|
|
description: Name of keypair to assign to servers
|
|
image:
|
|
type: string
|
|
description: Name of image to use for servers
|
|
flavor:
|
|
type: string
|
|
description: Flavor to use for servers
|
|
public_net_id:
|
|
type: string
|
|
description: >
|
|
ID of public network for which floating IP addresses will be allocated
|
|
private_net_id:
|
|
type: string
|
|
description: ID of private network into which servers get deployed
|
|
private_subnet_id:
|
|
type: string
|
|
description: ID of private sub network into which servers get deployed
|
|
|
|
resources:
|
|
server1:
|
|
type: OS::Nova::Server
|
|
properties:
|
|
name: Server1
|
|
image: { get_param: image }
|
|
flavor: { get_param: flavor }
|
|
key_name: { get_param: key_name }
|
|
networks:
|
|
- port: { get_resource: server1_port }
|
|
|
|
server1_port:
|
|
type: OS::Neutron::Port
|
|
properties:
|
|
network_id: { get_param: private_net_id }
|
|
fixed_ips:
|
|
- subnet_id: { get_param: private_subnet_id }
|
|
security_groups: [{ get_resource: server_security_group }]
|
|
|
|
server1_floating_ip:
|
|
type: OS::Neutron::FloatingIP
|
|
properties:
|
|
floating_network_id: { get_param: public_net_id }
|
|
port_id: { get_resource: server1_port }
|
|
|
|
server2:
|
|
type: OS::Nova::Server
|
|
properties:
|
|
name: Server2
|
|
image: { get_param: image }
|
|
flavor: { get_param: flavor }
|
|
key_name: { get_param: key_name }
|
|
networks:
|
|
- port: { get_resource: server2_port }
|
|
|
|
server2_port:
|
|
type: OS::Neutron::Port
|
|
properties:
|
|
network_id: { get_param: private_net_id }
|
|
fixed_ips:
|
|
- subnet_id: { get_param: private_subnet_id }
|
|
security_groups: [{ get_resource: server_security_group }]
|
|
|
|
server2_floating_ip:
|
|
type: OS::Neutron::FloatingIP
|
|
properties:
|
|
floating_network_id: { get_param: public_net_id }
|
|
port_id: { get_resource: server2_port }
|
|
|
|
server_security_group:
|
|
type: OS::Neutron::SecurityGroup
|
|
properties:
|
|
description: Add security group rules for server
|
|
name: security-group
|
|
rules:
|
|
- remote_ip_prefix: 0.0.0.0/0
|
|
protocol: tcp
|
|
port_range_min: 22
|
|
port_range_max: 22
|
|
- remote_ip_prefix: 0.0.0.0/0
|
|
protocol: icmp
|
|
|
|
outputs:
|
|
server1_private_ip:
|
|
description: IP address of server1 in private network
|
|
value: { get_attr: [ server1, first_address ] }
|
|
server1_public_ip:
|
|
description: Floating IP address of server1 in public network
|
|
value: { get_attr: [ server1_floating_ip, floating_ip_address ] }
|
|
server2_private_ip:
|
|
description: IP address of server2 in private network
|
|
value: { get_attr: [ server2, first_address ] }
|
|
server2_public_ip:
|
|
description: Floating IP address of server2 in public network
|
|
value: { get_attr: [ server2_floating_ip, floating_ip_address ] }
|