heat_template_version: 2013-05-23 description: > This is a nested stack that defines a single swarm node, based on a vanilla Fedora 20 cloud image. This stack is included by a ResourceGroup resource in the parent template (swarmcluster.yaml). parameters: server_image: type: string description: glance image used to boot the server server_flavor: type: string description: flavor to use when booting the server ssh_key_name: type: string description: name of ssh key to be provisioned on our server docker_volume_size: type: number description: > size of a cinder volume to allocate to docker for container/image storage external_network: type: string description: uuid/name of a network to use for floating ip addresses fixed_network_id: type: string description: Network from which to allocate fixed addresses. fixed_subnet_id: type: string description: Subnet from which to allocate fixed addresses. network_driver: type: string description: network driver to use for instantiating container networks flannel_network_cidr: type: string description: network range for flannel overlay network discovery_url: type: string description: url provided for node discovery http_proxy: type: string description: http proxy address for docker https_proxy: type: string description: https proxy address for docker no_proxy: type: string description: no proxies for docker swarm_api_ip: type: string description: swarm master's api server ip address api_ip_address: type: string description: swarm master's api server public ip address bay_uuid: type: string description: identifier for the bay this template is generating magnum_url: type: string description: endpoint to retrieve TLS certs from tls_disabled: type: boolean description: whether or not to disable TLS swarm_version: type: string description: version of swarm used for swarm cluster secgroup_swarm_node_id: type: string description: ID of the security group for swarm node. etcd_server_ip: type: string description: ip address of the load balancer pool of etcd server. trustee_user_id: type: string description: user id of the trustee trustee_password: type: string description: password of the trustee hidden: true trust_id: type: string description: id of the trust which is used by the trustee hidden: true auth_url: type: string description: url for keystone resources: node_cloud_init_wait_handle: type: "AWS::CloudFormation::WaitConditionHandle" node_cloud_init_wait_condition: type: "AWS::CloudFormation::WaitCondition" depends_on: - swarm_node properties: Handle: get_resource: node_cloud_init_wait_handle Timeout: 6000 node_agent_wait_handle: type: "AWS::CloudFormation::WaitConditionHandle" node_agent_wait_condition: type: "AWS::CloudFormation::WaitCondition" depends_on: - swarm_node properties: Handle: get_resource: node_agent_wait_handle Timeout: 6000 ###################################################################### # # software configs. these are components that are combined into # a multipart MIME user-data archive. write_heat_params: type: "OS::Heat::SoftwareConfig" properties: group: ungrouped config: str_replace: template: {get_file: fragments/write-heat-params-node.yaml} params: "$WAIT_HANDLE": {get_resource: node_cloud_init_wait_handle} "$DOCKER_VOLUME": {get_resource: docker_volume} "$HTTP_PROXY": {get_param: http_proxy} "$HTTPS_PROXY": {get_param: https_proxy} "$NO_PROXY": {get_param: no_proxy} "$SWARM_API_IP": {get_param: swarm_api_ip} "$SWARM_NODE_IP": {get_attr: [swarm_node_eth0, fixed_ips, 0, ip_address]} "$BAY_UUID": {get_param: bay_uuid} "$MAGNUM_URL": {get_param: magnum_url} "$TLS_DISABLED": {get_param: tls_disabled} "$NETWORK_DRIVER": {get_param: network_driver} "$ETCD_SERVER_IP": {get_param: etcd_server_ip} "$API_IP_ADDRESS": {get_param: api_ip_address} "$SWARM_VERSION": {get_param: swarm_version} "$AGENT_WAIT_HANDLE": {get_resource: node_agent_wait_handle} "$TRUSTEE_USER_ID": {get_param: trustee_user_id} "$TRUSTEE_PASSWORD": {get_param: trustee_password} "$TRUST_ID": {get_param: trust_id} "$AUTH_URL": {get_param: auth_url} remove_docker_key: type: "OS::Heat::SoftwareConfig" properties: group: ungrouped config: {get_file: fragments/remove-docker-key.sh} make_cert: type: "OS::Heat::SoftwareConfig" properties: group: ungrouped config: {get_file: fragments/make-cert.py} configure_docker_storage: type: OS::Heat::SoftwareConfig properties: group: ungrouped config: {get_file: fragments/configure-docker-storage.sh} write_docker_service: type: "OS::Heat::SoftwareConfig" properties: group: ungrouped config: {get_file: fragments/write-docker-service.sh} write_docker_socket: type: "OS::Heat::SoftwareConfig" properties: group: ungrouped config: {get_file: fragments/write-docker-socket.yaml} network_service: type: "OS::Heat::SoftwareConfig" properties: group: ungrouped config: {get_file: fragments/network-service.sh} write_swarm_agent_failure_service: type: "OS::Heat::SoftwareConfig" properties: group: ungrouped config: str_replace: template: {get_file: fragments/write-bay-failure-service.yaml} params: "$SERVICE": swarm-agent "$WAIT_HANDLE": {get_resource: node_agent_wait_handle} write_swarm_agent_service: type: "OS::Heat::SoftwareConfig" properties: group: ungrouped config: {get_file: fragments/write-swarm-agent-service.sh} enable_services: type: "OS::Heat::SoftwareConfig" properties: group: ungrouped config: str_replace: template: {get_file: fragments/enable-services.sh} params: "$NODE_SERVICES": "docker.socket swarm-agent" cfn_signal: type: "OS::Heat::SoftwareConfig" properties: group: ungrouped config: {get_file: fragments/cfn-signal.sh} disable_selinux: type: "OS::Heat::SoftwareConfig" properties: group: ungrouped config: {get_file: fragments/disable-selinux.sh} add_proxy: type: "OS::Heat::SoftwareConfig" properties: group: ungrouped config: {get_file: fragments/add-proxy.sh} swarm_node_init: type: "OS::Heat::MultipartMime" properties: parts: - config: {get_resource: disable_selinux} - config: {get_resource: remove_docker_key} - config: {get_resource: write_heat_params} - config: {get_resource: make_cert} - config: {get_resource: network_service} - config: {get_resource: configure_docker_storage} - config: {get_resource: write_swarm_agent_failure_service} - config: {get_resource: write_swarm_agent_service} - config: {get_resource: write_docker_service} - config: {get_resource: write_docker_socket} - config: {get_resource: add_proxy} - config: {get_resource: enable_services} - config: {get_resource: cfn_signal} swarm_node: type: "OS::Nova::Server" properties: image: get_param: server_image flavor: get_param: server_flavor key_name: get_param: ssh_key_name user_data_format: RAW user_data: {get_resource: swarm_node_init} networks: - port: get_resource: swarm_node_eth0 swarm_node_eth0: type: "OS::Neutron::Port" properties: network_id: get_param: fixed_network_id security_groups: - {get_param: secgroup_swarm_node_id} fixed_ips: - subnet_id: get_param: fixed_subnet_id allowed_address_pairs: - ip_address: {get_param: flannel_network_cidr} swarm_node_floating: type: "OS::Neutron::FloatingIP" properties: floating_network: get_param: external_network port_id: get_resource: swarm_node_eth0 ###################################################################### # # docker storage. This allocates a cinder volume and attaches it # to the node. # docker_volume: type: OS::Cinder::Volume properties: size: {get_param: docker_volume_size} docker_volume_attach: type: OS::Cinder::VolumeAttachment properties: instance_uuid: {get_resource: swarm_node} volume_id: {get_resource: docker_volume} mountpoint: /dev/vdb outputs: swarm_node_ip: value: {get_attr: [swarm_node_eth0, fixed_ips, 0, ip_address]} description: > This is the "private" address of the Swarm node. swarm_node_external_ip: value: {get_attr: [swarm_node_floating, floating_ip_address]} description: > This is the "public" address of the Swarm node.