216 lines
7.1 KiB
YAML
216 lines
7.1 KiB
YAML
heat_template_version: 2016-10-14
|
|
|
|
parameters:
|
|
|
|
key_name:
|
|
type: string
|
|
default: default
|
|
description: Nova keypair to inject into the undercloud and bmc
|
|
|
|
radvd_flavor:
|
|
type: string
|
|
default: m1.small
|
|
description: The Nova flavor to use for the radvd instance
|
|
|
|
radvd_image:
|
|
type: string
|
|
default: CentOS-7-x86_64-GenericCloud
|
|
description: |
|
|
The base image for the radvd instance. A CentOS 7 image is currently
|
|
the only one supported.
|
|
|
|
radvd_prefix:
|
|
type: string
|
|
default: radvd
|
|
description: Prefix for the name of the radvd instance
|
|
|
|
radvd_provision_address:
|
|
type: string
|
|
description: radvd address on the provision network subnet
|
|
default: fd12:3456:789a:1::fffe
|
|
|
|
IPv6_dhcpv6-statefull:
|
|
type: boolean
|
|
description: |
|
|
Controls radvd parameters AdvManagedFlag and AdvAutonomous. For stateful
|
|
addressing these should be AdvManagedFlag: on, AdvAutonomous: off, for
|
|
statelss (SLAAC) these should be AdvManagedFlag: off, AdvAutonomous: on.
|
|
default: false
|
|
|
|
networks:
|
|
type: json
|
|
|
|
private_net:
|
|
type: string
|
|
|
|
NtpPool:
|
|
default: pool.ntp.org
|
|
description: |
|
|
NTP pool, the pool name is expected to resolve to multiple addresses which
|
|
might change over time. For IPv6 overclouds the radvd instance can act
|
|
as the NTP server.
|
|
type: string
|
|
|
|
|
|
conditions:
|
|
dhcpv6-statefull:
|
|
get_param: IPv6_dhcpv6-statefull
|
|
|
|
resources:
|
|
radvd_port_private:
|
|
type: OS::Neutron::Port
|
|
properties:
|
|
name: radvd_port_private
|
|
network: {get_param: private_net}
|
|
|
|
radvd_port_provision:
|
|
type: OS::Neutron::Port
|
|
properties:
|
|
name: radvd_port_provision
|
|
network: {get_param: [networks, provision]}
|
|
port_security_enabled: False
|
|
fixed_ips:
|
|
- ip_address: {get_param: radvd_provision_address}
|
|
|
|
init_packages:
|
|
type: OS::Heat::CloudConfig
|
|
properties:
|
|
cloud_config:
|
|
package_upgrade: true
|
|
packages:
|
|
- centos-release-openstack-stein
|
|
- radvd
|
|
- chrony
|
|
|
|
init_files:
|
|
type: OS::Heat::CloudConfig
|
|
properties:
|
|
cloud_config:
|
|
write_files:
|
|
- path: /etc/os-net-config/config.yaml
|
|
content:
|
|
str_replace:
|
|
template: |
|
|
network_config:
|
|
- type: interface
|
|
name: eth0
|
|
use_dhcp: false
|
|
use_dhcpv6: false
|
|
addresses:
|
|
- ip_netmask: $private_ip_netmask
|
|
routes:
|
|
- default: true
|
|
next_hop: $private_gateway
|
|
- type: interface
|
|
name: eth1
|
|
use_dhcp: false
|
|
use_dhcpv6: false
|
|
addresses:
|
|
- ip_netmask: $provision_ip_netmask
|
|
params:
|
|
$private_gateway: {get_attr: [radvd_port_private, subnets, 0, gateway_ip]}
|
|
$private_ip_netmask:
|
|
list_join:
|
|
- /
|
|
- - {get_attr: [radvd_port_private, fixed_ips, 0, ip_address]}
|
|
- {str_split: ['/', {get_attr: [radvd_port_private, subnets, 0, cidr]}, 1]}
|
|
$provision_ip_netmask:
|
|
list_join:
|
|
- /
|
|
- - {get_attr: [radvd_port_provision, fixed_ips, 0, ip_address]}
|
|
- {str_split: ['/', {get_attr: [radvd_port_provision, subnets, 0, cidr]}, 1]}
|
|
- path: /etc/radvd.conf
|
|
content:
|
|
str_replace:
|
|
template: |
|
|
interface eth1 {
|
|
AdvSendAdvert on;
|
|
AdvManagedFlag $AdvManagedFlag;
|
|
AdvOtherConfigFlag on;
|
|
AdvRASolicitedUnicast on;
|
|
AdvLinkMTU $MTU;
|
|
prefix $provision_cidr {
|
|
AdvAutonomous $AdvAutonomous;
|
|
AdvOnLink on;
|
|
};
|
|
};
|
|
params:
|
|
$provision_cidr: {get_attr: [radvd_port_provision, subnets, 0, cidr]}
|
|
$MTU: {get_attr: [radvd_port_provision, network, mtu]}
|
|
$AdvManagedFlag:
|
|
if:
|
|
- dhcpv6-statefull
|
|
- 'on'
|
|
- 'off'
|
|
$AdvAutonomous:
|
|
if:
|
|
- dhcpv6-statefull
|
|
- 'off'
|
|
- 'on'
|
|
- path: /etc/sysctl.d/98-ipv6-routing.conf
|
|
content: |
|
|
net.ipv6.conf.all.forwarding = 1
|
|
net.ipv6.conf.eth1.forwarding = 1
|
|
net.ipv6.conf.eth1.mc_forwarding = 1
|
|
- path: /etc/chrony.conf
|
|
content:
|
|
str_replace:
|
|
template: |
|
|
pool $ntp_pool iburst
|
|
# Record the rate at which the system clock gains/losses time.
|
|
driftfile /var/lib/chrony/drift
|
|
# Allow the system clock to be stepped in the first three updates
|
|
# if its offset is larger than 1 second.
|
|
makestep 1.0 3
|
|
# Allow NTP client access from provision network.
|
|
allow $provision_cidr
|
|
# Serve time even if not synchronized to a time source.
|
|
local stratum 10
|
|
# Specify file containing keys for NTP authentication.
|
|
keyfile /etc/chrony.keys
|
|
# Get TAI-UTC offset and leap seconds from the system tz database.
|
|
leapsectz right/UTC
|
|
# Specify directory for log files.
|
|
logdir /var/log/chrony
|
|
params:
|
|
$ntp_pool: {get_param: NtpPool}
|
|
$provision_cidr: {get_attr: [radvd_port_provision, subnets, 0, cidr]}
|
|
|
|
|
|
init_runcmd:
|
|
type: OS::Heat::CloudConfig
|
|
properties:
|
|
cloud_config:
|
|
runcmd:
|
|
- ['sysctl','--system']
|
|
- ['yum', '-y', 'install', 'os-net-config']
|
|
- ['os-net-config', '--config', '/etc/os-net-config/config.yaml']
|
|
- ['systemctl', 'enable', 'radvd.service']
|
|
- ['systemctl', 'start', 'radvd.service']
|
|
- ['systemctl', 'status', 'radvd.service']
|
|
- ['systemctl', 'enable', 'chronyd.servce']
|
|
- ['systemctl', 'start', 'chronyd.servce']
|
|
- ['systemctl', 'status', 'chronyd.servce']
|
|
|
|
radvd_init:
|
|
type: OS::Heat::MultipartMime
|
|
properties:
|
|
parts:
|
|
- config: {get_resource: init_packages}
|
|
- config: {get_resource: init_files}
|
|
- config: {get_resource: init_runcmd}
|
|
|
|
radvb_server:
|
|
type: OS::Nova::Server
|
|
properties:
|
|
name: {get_param: radvd_prefix}
|
|
flavor: {get_param: radvd_flavor}
|
|
image: {get_param: radvd_image}
|
|
key_name: {get_param: key_name}
|
|
networks:
|
|
- {port: {get_resource: radvd_port_private}}
|
|
- {port: {get_resource: radvd_port_provision}}
|
|
config_drive: true
|
|
user_data_format: RAW
|
|
user_data: {get_resource: radvd_init}
|