diff --git a/deployment/undercloud/minion-rabbitmq-puppet.yaml b/deployment/undercloud/minion-rabbitmq-puppet.yaml
new file mode 100644
index 0000000000..1e8e6ebe6b
--- /dev/null
+++ b/deployment/undercloud/minion-rabbitmq-puppet.yaml
@@ -0,0 +1,85 @@
+heat_template_version: rocky
+
+description: >
+    Service to provide oslo messaging credentials for the Undercloud Minion
+
+parameters:
+  ServiceData:
+    default: {}
+    description: Dictionary packing service data
+    type: json
+  ServiceNetMap:
+    default: {}
+    description: Mapping of service_name -> network name. Typically set
+                 via parameter_defaults in the resource registry.  This
+                 mapping overrides those in ServiceNetMapDefaults.
+    type: json
+  DefaultPasswords:
+    default: {}
+    type: json
+  RoleName:
+    default: ''
+    description: Role name on which the service is applied
+    type: string
+  RoleParameters:
+    default: {}
+    description: Parameters specific to the role
+    type: json
+  EndpointMap:
+    default: {}
+    description: Mapping of service endpoint -> protocol. Typically set
+                 via parameter_defaults in the resource registry.
+    type: json
+  NotifyPort:
+    default: 5672
+    description: The network port for messaging Notify backend
+    type: number
+  NotifyUserName:
+    default: guest
+    description: The username for messaging Notifications
+    type: string
+  NotifyPassword:
+    description: The password for messaging Notifications
+    type: string
+    hidden: true
+  NotifyUseSSL:
+    default: false
+    description: Messaging Notification client subscriber parameter to specify
+                 an SSL connection to the messaging host.
+    type: string
+  RpcPort:
+    default: 5672
+    description: The network port for messaging backend
+    type: number
+  RpcUserName:
+    default: guest
+    description: The username for messaging backend
+    type: string
+  RpcPassword:
+    description: The password for messaging backend
+    type: string
+    hidden: true
+  RpcUseSSL:
+    default: false
+    description: >
+        Messaging client subscriber parameter to specify
+        an SSL connection to the messaging host.
+    type: string
+
+outputs:
+  role_data:
+    description: Service to provide oslo messaging credentials for the Undercloud Minion
+    value:
+      service_name: oslo_messaging_minion
+      global_config_settings:
+        oslo_messaging_notify_scheme: rabbit
+        oslo_messaging_notify_user_name: {get_param: NotifyUserName}
+        oslo_messaging_notify_password: {get_param: NotifyPassword}
+        oslo_messaging_notify_use_ssl: {get_param: NotifyUseSSL}
+        oslo_messaging_notify_port: {get_param: NotifyPort}
+        oslo_messaging_rpc_scheme: rabbit
+        oslo_messaging_rpc_user_name: {get_param: RpcUserName}
+        oslo_messaging_rpc_password: {get_param: RpcPassword}
+        oslo_messaging_rpc_use_ssl: {get_param: RpcUseSSL}
+        oslo_messaging_rpc_port: {get_param: RpcPort }
+      step_config: ''
diff --git a/environments/services/heat-engine.yaml b/environments/services/heat-engine.yaml
new file mode 100644
index 0000000000..b8fd6ba4ab
--- /dev/null
+++ b/environments/services/heat-engine.yaml
@@ -0,0 +1,2 @@
+resource_registry:
+  OS::TripleO::Services::HeatEngine: ../../deployment/heat/heat-engine-container-puppet.yaml
diff --git a/environments/services/ironic-conductor.yaml b/environments/services/ironic-conductor.yaml
new file mode 100644
index 0000000000..36427450a4
--- /dev/null
+++ b/environments/services/ironic-conductor.yaml
@@ -0,0 +1,2 @@
+resource_registry:
+  OS::TripleO::Services::IronicConductor: ../../deployment/ironic/ironic-conductor-container-puppet.yaml
diff --git a/environments/undercloud/undercloud-minion.yaml b/environments/undercloud/undercloud-minion.yaml
new file mode 100644
index 0000000000..00341cb593
--- /dev/null
+++ b/environments/undercloud/undercloud-minion.yaml
@@ -0,0 +1,258 @@
+# *******************************************************************
+# This file was created automatically by the sample environment
+# generator. Developers should use `tox -e genconfig` to update it.
+# Users are recommended to make changes to a copy of the file instead
+# of the original, if any customizations are needed.
+# *******************************************************************
+# title: Undercloud Minion node
+# description: |
+#   TODO
+parameter_defaults:
+  # DNS servers to use for the Overcloud (2 max for some implementations). If not set the nameservers configured in the ctlplane subnet's dns_nameservers attribute will be used.
+  # Type: comma_delimited_list
+  DnsServers: []
+
+  # Set to true to enable package installation at deploy time
+  # Type: boolean
+  EnablePackageInstall: True
+
+  # NTP servers list. Defaulted to a set of pool.ntp.org servers in order to have a sane default for Pacemaker deployments when not configuring this parameter by default.
+  # Type: comma_delimited_list
+  NtpServer: ['0.pool.ntp.org', '1.pool.ntp.org', '2.pool.ntp.org', '3.pool.ntp.org']
+
+  # How the server should receive the metadata required for software configuration.
+  # Type: string
+  SoftwareConfigTransport: POLL_SERVER_HEAT
+
+  # Set this to true to open up ssh access from all sources.
+  # Type: boolean
+  SshFirewallAllowAll: True
+
+  # Heat action on performed top-level stack.  Note StackUpdateType is set to UPGRADE when a major-version upgrade is in progress.
+  # Mandatory. This parameter must be set by the user.
+  # Type: string
+  StackAction: CREATE
+
+resource_registry:
+  OS::TripleO::Network::Ports::ControlPlaneVipPort: OS::Heat::None
+  OS::TripleO::Services::AodhApi: OS::Heat::None
+  OS::TripleO::Services::AodhEvaluator: OS::Heat::None
+  OS::TripleO::Services::AodhListener: OS::Heat::None
+  OS::TripleO::Services::AodhNotifier: OS::Heat::None
+  OS::TripleO::Services::Apache: OS::Heat::None
+  OS::TripleO::Services::AuditD: OS::Heat::None
+  OS::TripleO::Services::BarbicanApi: OS::Heat::None
+  OS::TripleO::Services::BarbicanBackendDogtag: OS::Heat::None
+  OS::TripleO::Services::BarbicanBackendKmip: OS::Heat::None
+  OS::TripleO::Services::BarbicanBackendPkcs11Crypto: OS::Heat::None
+  OS::TripleO::Services::BarbicanBackendSimpleCrypto: OS::Heat::None
+  OS::TripleO::Services::BlockStorageCinderVolume: OS::Heat::None
+  OS::TripleO::Services::BootParams: OS::Heat::None
+  OS::TripleO::Services::CeilometerAgentCentral: OS::Heat::None
+  OS::TripleO::Services::CeilometerAgentIpmi: OS::Heat::None
+  OS::TripleO::Services::CeilometerAgentNotification: OS::Heat::None
+  OS::TripleO::Services::CephClient: OS::Heat::None
+  OS::TripleO::Services::CephExternal: OS::Heat::None
+  OS::TripleO::Services::CephMds: OS::Heat::None
+  OS::TripleO::Services::CephMgr: OS::Heat::None
+  OS::TripleO::Services::CephMon: OS::Heat::None
+  OS::TripleO::Services::CephNfs: OS::Heat::None
+  OS::TripleO::Services::CephOSD: OS::Heat::None
+  OS::TripleO::Services::CephRbdMirror: OS::Heat::None
+  OS::TripleO::Services::CephRgw: OS::Heat::None
+  OS::TripleO::Services::Chrony: OS::Heat::None
+  OS::TripleO::Services::CinderApi: OS::Heat::None
+  OS::TripleO::Services::CinderBackendDellEMCUnity: OS::Heat::None
+  OS::TripleO::Services::CinderBackendDellEMCVMAXISCSI: OS::Heat::None
+  OS::TripleO::Services::CinderBackendDellEMCVNX: OS::Heat::None
+  OS::TripleO::Services::CinderBackendDellEMCXTREMIOISCSI: OS::Heat::None
+  OS::TripleO::Services::CinderBackendDellPs: OS::Heat::None
+  OS::TripleO::Services::CinderBackendDellSc: OS::Heat::None
+  OS::TripleO::Services::CinderBackendNVMeOF: OS::Heat::None
+  OS::TripleO::Services::CinderBackendNetApp: OS::Heat::None
+  OS::TripleO::Services::CinderBackendPure: OS::Heat::None
+  OS::TripleO::Services::CinderBackendScaleIO: OS::Heat::None
+  OS::TripleO::Services::CinderBackendVRTSHyperScale: OS::Heat::None
+  OS::TripleO::Services::CinderBackup: OS::Heat::None
+  OS::TripleO::Services::CinderHPELeftHandISCSI: OS::Heat::None
+  OS::TripleO::Services::CinderScheduler: OS::Heat::None
+  OS::TripleO::Services::CinderVolume: OS::Heat::None
+  OS::TripleO::Services::Clustercheck: OS::Heat::None
+  OS::TripleO::Services::Collectd: OS::Heat::None
+  OS::TripleO::Services::ComputeCeilometerAgent: OS::Heat::None
+  OS::TripleO::Services::ComputeInstanceHA: OS::Heat::None
+  OS::TripleO::Services::ComputeNeutronCorePlugin: OS::Heat::None
+  OS::TripleO::Services::ComputeNeutronCorePluginNuage: OS::Heat::None
+  OS::TripleO::Services::ComputeNeutronL3Agent: OS::Heat::None
+  OS::TripleO::Services::ComputeNeutronMetadataAgent: OS::Heat::None
+  OS::TripleO::Services::ComputeNeutronOvsAgent: OS::Heat::None
+  OS::TripleO::Services::ComputeNeutronOvsDpdk: OS::Heat::None
+  OS::TripleO::Services::ContainerImagePrepare: ../../deployment/container-image-prepare/container-image-prepare-baremetal-ansible.yaml
+  OS::TripleO::Services::DesignateApi: OS::Heat::None
+  OS::TripleO::Services::DesignateCentral: OS::Heat::None
+  OS::TripleO::Services::DesignateMDNS: OS::Heat::None
+  OS::TripleO::Services::DesignateProducer: OS::Heat::None
+  OS::TripleO::Services::DesignateSink: OS::Heat::None
+  OS::TripleO::Services::DesignateWorker: OS::Heat::None
+  OS::TripleO::Services::Docker: OS::Heat::None
+  OS::TripleO::Services::DockerRegistry: OS::Heat::None
+  OS::TripleO::Services::Ec2Api: OS::Heat::None
+  OS::TripleO::Services::Etcd: OS::Heat::None
+  OS::TripleO::Services::ExternalSwiftProxy: OS::Heat::None
+  OS::TripleO::Services::Fluentd: OS::Heat::None
+  OS::TripleO::Services::GlanceApi: OS::Heat::None
+  OS::TripleO::Services::GnocchiApi: OS::Heat::None
+  OS::TripleO::Services::GnocchiMetricd: OS::Heat::None
+  OS::TripleO::Services::GnocchiStatsd: OS::Heat::None
+  OS::TripleO::Services::HAProxyInternalTLS: OS::Heat::None
+  OS::TripleO::Services::HAProxyPublicTLS: OS::Heat::None
+  OS::TripleO::Services::HAproxy: OS::Heat::None
+  OS::TripleO::Services::HeatApi: OS::Heat::None
+  OS::TripleO::Services::HeatApiCfn: OS::Heat::None
+  OS::TripleO::Services::HeatApiCloudwatch: OS::Heat::None
+  OS::TripleO::Services::HeatEngine: OS::Heat::None
+  OS::TripleO::Services::Horizon: OS::Heat::None
+  OS::TripleO::Services::IpaClient: OS::Heat::None
+  OS::TripleO::Services::Ipsec: OS::Heat::None
+  OS::TripleO::Services::IronicApi: OS::Heat::None
+  OS::TripleO::Services::IronicConductor: OS::Heat::None
+  OS::TripleO::Services::IronicInspector: OS::Heat::None
+  OS::TripleO::Services::IronicNeutronAgent: OS::Heat::None
+  OS::TripleO::Services::IronicPxe: OS::Heat::None
+  OS::TripleO::Services::Iscsid: OS::Heat::None
+  OS::TripleO::Services::Keepalived: OS::Heat::None
+  OS::TripleO::Services::Keystone: OS::Heat::None
+  OS::TripleO::Services::Kubernetes::Master: OS::Heat::None
+  OS::TripleO::Services::Kubernetes::Worker: OS::Heat::None
+  OS::TripleO::Services::LiquidioCompute: OS::Heat::None
+  OS::TripleO::Services::Logging::BarbicanApi: OS::Heat::None
+  OS::TripleO::Services::Logging::GlanceApi: OS::Heat::None
+  OS::TripleO::Services::Logging::HAProxy: OS::Heat::None
+  OS::TripleO::Services::Logging::HeatApi: OS::Heat::None
+  OS::TripleO::Services::Logging::HeatApiCfn: OS::Heat::None
+  OS::TripleO::Services::Logging::Keystone: OS::Heat::None
+  OS::TripleO::Services::Logging::NeutronApi: OS::Heat::None
+  OS::TripleO::Services::Logging::NeutronCommon: OS::Heat::None
+  OS::TripleO::Services::Logging::NovaApi: OS::Heat::None
+  OS::TripleO::Services::Logging::NovaCommon: OS::Heat::None
+  OS::TripleO::Services::Logging::NovaLibvirt: OS::Heat::None
+  OS::TripleO::Services::Logging::NovaMetadata: OS::Heat::None
+  OS::TripleO::Services::Logging::OpenDaylightApi: OS::Heat::None
+  OS::TripleO::Services::Logging::PankoApi: OS::Heat::None
+  OS::TripleO::Services::Logging::PlacementApi: OS::Heat::None
+  OS::TripleO::Services::ManilaApi: OS::Heat::None
+  OS::TripleO::Services::ManilaBackendCephFs: OS::Heat::None
+  OS::TripleO::Services::ManilaBackendIsilon: OS::Heat::None
+  OS::TripleO::Services::ManilaBackendNetapp: OS::Heat::None
+  OS::TripleO::Services::ManilaBackendUnity: OS::Heat::None
+  OS::TripleO::Services::ManilaBackendVMAX: OS::Heat::None
+  OS::TripleO::Services::ManilaBackendVNX: OS::Heat::None
+  OS::TripleO::Services::ManilaScheduler: OS::Heat::None
+  OS::TripleO::Services::ManilaShare: OS::Heat::None
+  OS::TripleO::Services::MasqueradeNetworks: OS::Heat::None
+  OS::TripleO::Services::Memcached: OS::Heat::None
+  OS::TripleO::Services::MetricsQdr: OS::Heat::None
+  OS::TripleO::Services::MistralApi: OS::Heat::None
+  OS::TripleO::Services::MistralEngine: OS::Heat::None
+  OS::TripleO::Services::MistralEventEngine: OS::Heat::None
+  OS::TripleO::Services::MistralExecutor: OS::Heat::None
+  OS::TripleO::Services::Multipathd: OS::Heat::None
+  OS::TripleO::Services::MySQL: OS::Heat::None
+  OS::TripleO::Services::NeutronAZConfig: OS::Heat::None
+  OS::TripleO::Services::NeutronApi: OS::Heat::None
+  OS::TripleO::Services::NeutronBgpVpnApi: OS::Heat::None
+  OS::TripleO::Services::NeutronBgpVpnBagpipe: OS::Heat::None
+  OS::TripleO::Services::NeutronCorePlugin: OS::Heat::None
+  OS::TripleO::Services::NeutronCorePluginML2Ansible: OS::Heat::None
+  OS::TripleO::Services::NeutronCorePluginML2Nuage: OS::Heat::None
+  OS::TripleO::Services::NeutronCorePluginML2OVN: OS::Heat::None
+  OS::TripleO::Services::NeutronCorePluginMLNXSDN: OS::Heat::None
+  OS::TripleO::Services::NeutronCorePluginMidonet: OS::Heat::None
+  OS::TripleO::Services::NeutronCorePluginNSX: OS::Heat::None
+  OS::TripleO::Services::NeutronCorePluginNuage: OS::Heat::None
+  OS::TripleO::Services::NeutronCorePluginPlumgrid: OS::Heat::None
+  OS::TripleO::Services::NeutronCorePluginVTS: OS::Heat::None
+  OS::TripleO::Services::NeutronDhcpAgent: OS::Heat::None
+  OS::TripleO::Services::NeutronL2gwAgent: OS::Heat::None
+  OS::TripleO::Services::NeutronL2gwApi: OS::Heat::None
+  OS::TripleO::Services::NeutronL3Agent: OS::Heat::None
+  OS::TripleO::Services::NeutronLbaasv2Agent: OS::Heat::None
+  OS::TripleO::Services::NeutronLbaasv2Api: OS::Heat::None
+  OS::TripleO::Services::NeutronLinuxbridgeAgent: OS::Heat::None
+  OS::TripleO::Services::NeutronML2FujitsuCfab: OS::Heat::None
+  OS::TripleO::Services::NeutronML2FujitsuFossw: OS::Heat::None
+  OS::TripleO::Services::NeutronMetadataAgent: OS::Heat::None
+  OS::TripleO::Services::NeutronNuageVrs: OS::Heat::None
+  OS::TripleO::Services::NeutronOvsAgent: OS::Heat::None
+  OS::TripleO::Services::NeutronServer: OS::Heat::None
+  OS::TripleO::Services::NeutronSfcApi: OS::Heat::None
+  OS::TripleO::Services::NeutronSriovAgent: OS::Heat::None
+  OS::TripleO::Services::NeutronSriovHostConfig: OS::Heat::None
+  OS::TripleO::Services::NeutronVppAgent: OS::Heat::None
+  OS::TripleO::Services::NovaAZConfig: OS::Heat::None
+  OS::TripleO::Services::NovaApi: OS::Heat::None
+  OS::TripleO::Services::NovaCompute: OS::Heat::None
+  OS::TripleO::Services::NovaConductor: OS::Heat::None
+  OS::TripleO::Services::NovaConsoleauth: OS::Heat::None
+  OS::TripleO::Services::NovaIronic: OS::Heat::None
+  OS::TripleO::Services::NovaLibvirt: OS::Heat::None
+  OS::TripleO::Services::NovaLibvirtGuests: OS::Heat::None
+  OS::TripleO::Services::NovaMetadata: OS::Heat::None
+  OS::TripleO::Services::NovaMigrationTarget: OS::Heat::None
+  OS::TripleO::Services::NovaPlacement: OS::Heat::None
+  OS::TripleO::Services::NovaScheduler: OS::Heat::None
+  OS::TripleO::Services::NovaVncProxy: OS::Heat::None
+  OS::TripleO::Services::Novajoin: OS::Heat::None
+  OS::TripleO::Services::Ntp: OS::Heat::None
+  OS::TripleO::Services::OVNController: OS::Heat::None
+  OS::TripleO::Services::OVNDBs: OS::Heat::None
+  OS::TripleO::Services::OVNMetadataAgent: OS::Heat::None
+  OS::TripleO::Services::OctaviaApi: OS::Heat::None
+  OS::TripleO::Services::OctaviaDeploymentConfig: OS::Heat::None
+  OS::TripleO::Services::OctaviaHealthManager: OS::Heat::None
+  OS::TripleO::Services::OctaviaHousekeeping: OS::Heat::None
+  OS::TripleO::Services::OctaviaWorker: OS::Heat::None
+  OS::TripleO::Services::OpenDaylightApi: OS::Heat::None
+  OS::TripleO::Services::OpenDaylightOvs: OS::Heat::None
+  OS::TripleO::Services::OpenShift::GlusterFS: OS::Heat::None
+  OS::TripleO::Services::OpenShift::Infra: OS::Heat::None
+  OS::TripleO::Services::OpenShift::Master: OS::Heat::None
+  OS::TripleO::Services::OpenShift::Worker: OS::Heat::None
+  OS::TripleO::Services::OsloMessagingNotify: OS::Heat::None
+  OS::TripleO::Services::OsloMessagingRpc: OS::Heat::None
+  OS::TripleO::Services::Pacemaker: OS::Heat::None
+  OS::TripleO::Services::PacemakerRemote: OS::Heat::None
+  OS::TripleO::Services::PankoApi: OS::Heat::None
+  OS::TripleO::Services::PlacementApi: OS::Heat::None
+  OS::TripleO::Services::Podman: ../../deployment/podman/podman-baremetal-ansible.yaml
+  OS::TripleO::Services::Ptp: OS::Heat::None
+  OS::TripleO::Services::Qdr: OS::Heat::None
+  OS::TripleO::Services::RabbitMQ: OS::Heat::None
+  OS::TripleO::Services::Redis: OS::Heat::None
+  OS::TripleO::Services::RsyslogSidecar: OS::Heat::None
+  OS::TripleO::Services::SELinux: OS::Heat::None
+  OS::TripleO::Services::SaharaApi: OS::Heat::None
+  OS::TripleO::Services::SaharaEngine: OS::Heat::None
+  OS::TripleO::Services::Securetty: OS::Heat::None
+  OS::TripleO::Services::SensuClient: OS::Heat::None
+  OS::TripleO::Services::SkydiveAgent: OS::Heat::None
+  OS::TripleO::Services::SkydiveAnalyzer: OS::Heat::None
+  OS::TripleO::Services::Snmp: OS::Heat::None
+  OS::TripleO::Services::SwiftDispersion: OS::Heat::None
+  OS::TripleO::Services::SwiftProxy: OS::Heat::None
+  OS::TripleO::Services::SwiftRingBuilder: OS::Heat::None
+  OS::TripleO::Services::SwiftStorage: OS::Heat::None
+  OS::TripleO::Services::TLSProxyBase: OS::Heat::None
+  OS::TripleO::Services::Tacker: OS::Heat::None
+  OS::TripleO::Services::Tempest: OS::Heat::None
+  OS::TripleO::Services::Tmpwatch: ../../deployment/logrotate/tmpwatch-install.yaml
+  OS::TripleO::Services::TripleoPackages: OS::Heat::None
+  OS::TripleO::Services::TripleoUI: OS::Heat::None
+  OS::TripleO::Services::Tuned: OS::Heat::None
+  OS::TripleO::Services::UndercloudMinionMessaging: ../../deployment/undercloud/minion-rabbitmq-puppet.yaml
+  OS::TripleO::Services::UndercloudUpgrade: OS::Heat::None
+  OS::TripleO::Services::VRTSHyperScale: OS::Heat::None
+  OS::TripleO::Services::Vpp: OS::Heat::None
+  OS::TripleO::Services::Xinetd: OS::Heat::None
+  OS::TripleO::Services::Zaqar: OS::Heat::None
+  OS::TripleO::UndercloudMinion::Net::SoftwareConfig: ../../net-config-undercloud.yaml
diff --git a/roles/UndercloudMinion.yaml b/roles/UndercloudMinion.yaml
new file mode 100644
index 0000000000..b4eebdfe82
--- /dev/null
+++ b/roles/UndercloudMinion.yaml
@@ -0,0 +1,30 @@
+###############################################################################
+# Role: UndercloudMinion                                                      #
+###############################################################################
+- name: UndercloudMinion
+  description: |
+    A role to deploy an undercloud minion to handle scaling out of heat-engine
+    and ironic-conductor via heat using the 'openstack undercloud
+    minion deploy' command.
+  CountDefault: 1
+  disable_constraints: True
+  ServicesDefault:
+    - OS::TripleO::Services::CACerts
+    - OS::TripleO::Services::CertmongerUser
+    - OS::TripleO::Services::ContainerImagePrepare
+    - OS::TripleO::Services::ContainersLogrotateCrond
+    - OS::TripleO::Services::HeatEngine
+    - OS::TripleO::Services::IronicConductor
+    - OS::TripleO::Services::Kernel
+    - OS::TripleO::Services::MySQLClient
+    - OS::TripleO::Services::OpenStackClients
+    - OS::TripleO::Services::Podman
+    - OS::TripleO::Services::Rhsm
+    - OS::TripleO::Services::Timesync
+    - OS::TripleO::Services::Timezone
+    - OS::TripleO::Services::Tmpwatch
+    - OS::TripleO::Services::TripleoFirewall
+    - OS::TripleO::Services::TripleoValidations
+    - OS::TripleO::Services::Tuned
+    - OS::TripleO::Services::UndercloudMinionMessaging
+    - OS::TripleO::Services::UndercloudUpgrade
diff --git a/sample-env-generator/undercloud-minion.yaml b/sample-env-generator/undercloud-minion.yaml
new file mode 100644
index 0000000000..3669e22b31
--- /dev/null
+++ b/sample-env-generator/undercloud-minion.yaml
@@ -0,0 +1,275 @@
+#
+# This environment generator is used to generate some sample composable role
+# environment files.
+#
+environments:
+  -
+    name: undercloud/undercloud-minion
+    title: Undercloud Minion node
+    description: |
+      TODO
+    files:
+      deployment/timesync/chrony-baremetal-ansible.yaml:
+        parameters:
+          - NtpServer
+      deployment/tripleo-packages/tripleo-packages-baremetal-puppet.yaml:
+        parameters:
+          - EnablePackageInstall
+      deployment/sshd/sshd-baremetal-puppet.yaml:
+        parameters:
+          - SshFirewallAllowAll
+      # TODO(aschultz): hack to pull in this config transport, not sure it is
+      # still neded.
+      puppet/controller-role.yaml:
+        parameters:
+          - SoftwareConfigTransport
+          - DnsServers
+      puppet/all-nodes-config.yaml:
+        parameters:
+          - StackAction
+    sample_values:
+      # Normal bits for standalone
+      StackAction: CREATE
+      SoftwareConfigTransport: POLL_SERVER_HEAT
+      EnablePackageInstall: true
+      SshFirewallAllowAll: true
+      HeatEngineOptVolumes:
+        - /usr/lib/heat:/usr/lib/heat:ro
+      UndercloudMinionExtraConfig:
+        heat::keystone::authtoken::memcached_servers: "%{hiera('memcached::listen_ip')}:11211"
+        heat::cache::memcache_servers: "%{hiera('memcached::listen_ip')}:11211"
+    resource_registry:
+      # this network config is assumed by the tripleo deploy command
+      OS::TripleO::UndercloudMinion::Net::SoftwareConfig: ../../net-config-undercloud.yaml
+      OS::TripleO::Network::Ports::ControlPlaneVipPort: OS::Heat::None
+
+      # Activate container image prepare
+      OS::TripleO::Services::ContainerImagePrepare: ../../deployment/container-image-prepare/container-image-prepare-baremetal-ansible.yaml
+      OS::TripleO::Services::Podman: ../../deployment/podman/podman-baremetal-ansible.yaml
+
+      # Install tmpwatch
+      OS::TripleO::Services::Tmpwatch: ../../deployment/logrotate/tmpwatch-install.yaml
+
+      # TODO(aschultz): this probably needs an alternative solution
+      # Need to provide the oslo messaging hieradata
+      OS::TripleO::Services::UndercloudMinionMessaging: ../../deployment/undercloud/minion-rabbitmq-puppet.yaml
+
+      # Disable by default
+      OS::TripleO::Services::IronicConductor: OS::Heat::None
+
+      # Disable all the services not used when deploying just a minion
+      OS::TripleO::Services::AodhApi: OS::Heat::None
+      OS::TripleO::Services::AodhEvaluator: OS::Heat::None
+      OS::TripleO::Services::AodhListener: OS::Heat::None
+      OS::TripleO::Services::AodhNotifier: OS::Heat::None
+      OS::TripleO::Services::Apache: OS::Heat::None
+      OS::TripleO::Services::AuditD: OS::Heat::None
+      OS::TripleO::Services::BarbicanApi: OS::Heat::None
+      OS::TripleO::Services::BarbicanBackendDogtag: OS::Heat::None
+      OS::TripleO::Services::BarbicanBackendKmip: OS::Heat::None
+      OS::TripleO::Services::BarbicanBackendPkcs11Crypto: OS::Heat::None
+      OS::TripleO::Services::BarbicanBackendSimpleCrypto: OS::Heat::None
+      OS::TripleO::Services::BlockStorageCinderVolume: OS::Heat::None
+      OS::TripleO::Services::BootParams: OS::Heat::None
+      OS::TripleO::Services::CeilometerAgentCentral: OS::Heat::None
+      OS::TripleO::Services::CeilometerAgentIpmi: OS::Heat::None
+      OS::TripleO::Services::CeilometerAgentNotification: OS::Heat::None
+      OS::TripleO::Services::CephClient: OS::Heat::None
+      OS::TripleO::Services::CephExternal: OS::Heat::None
+      OS::TripleO::Services::CephMds: OS::Heat::None
+      OS::TripleO::Services::CephMgr: OS::Heat::None
+      OS::TripleO::Services::CephMon: OS::Heat::None
+      OS::TripleO::Services::CephNfs: OS::Heat::None
+      OS::TripleO::Services::CephOSD: OS::Heat::None
+      OS::TripleO::Services::CephRbdMirror: OS::Heat::None
+      OS::TripleO::Services::CephRgw: OS::Heat::None
+      OS::TripleO::Services::Chrony: OS::Heat::None
+      OS::TripleO::Services::CinderApi: OS::Heat::None
+      OS::TripleO::Services::CinderBackendDellEMCUnity: OS::Heat::None
+      OS::TripleO::Services::CinderBackendDellEMCVMAXISCSI: OS::Heat::None
+      OS::TripleO::Services::CinderBackendDellEMCVNX: OS::Heat::None
+      OS::TripleO::Services::CinderBackendDellEMCXTREMIOISCSI: OS::Heat::None
+      OS::TripleO::Services::CinderBackendDellPs: OS::Heat::None
+      OS::TripleO::Services::CinderBackendDellSc: OS::Heat::None
+      OS::TripleO::Services::CinderBackendNetApp: OS::Heat::None
+      OS::TripleO::Services::CinderBackendNVMeOF: OS::Heat::None
+      OS::TripleO::Services::CinderBackendPure: OS::Heat::None
+      OS::TripleO::Services::CinderBackendScaleIO: OS::Heat::None
+      OS::TripleO::Services::CinderBackendVRTSHyperScale: OS::Heat::None
+      OS::TripleO::Services::CinderBackup: OS::Heat::None
+      OS::TripleO::Services::CinderHPELeftHandISCSI: OS::Heat::None
+      OS::TripleO::Services::CinderScheduler: OS::Heat::None
+      OS::TripleO::Services::CinderVolume: OS::Heat::None
+      OS::TripleO::Services::Clustercheck: OS::Heat::None
+      OS::TripleO::Services::Collectd: OS::Heat::None
+      OS::TripleO::Services::ComputeCeilometerAgent: OS::Heat::None
+      OS::TripleO::Services::ComputeInstanceHA: OS::Heat::None
+      OS::TripleO::Services::ComputeNeutronCorePluginNuage: OS::Heat::None
+      OS::TripleO::Services::ComputeNeutronCorePlugin: OS::Heat::None
+      OS::TripleO::Services::ComputeNeutronL3Agent: OS::Heat::None
+      OS::TripleO::Services::ComputeNeutronMetadataAgent: OS::Heat::None
+      OS::TripleO::Services::ComputeNeutronOvsAgent: OS::Heat::None
+      OS::TripleO::Services::ComputeNeutronOvsDpdk: OS::Heat::None
+      OS::TripleO::Services::DesignateApi: OS::Heat::None
+      OS::TripleO::Services::DesignateCentral: OS::Heat::None
+      OS::TripleO::Services::DesignateMDNS: OS::Heat::None
+      OS::TripleO::Services::DesignateProducer: OS::Heat::None
+      OS::TripleO::Services::DesignateSink: OS::Heat::None
+      OS::TripleO::Services::DesignateWorker: OS::Heat::None
+      OS::TripleO::Services::Docker: OS::Heat::None
+      OS::TripleO::Services::DockerRegistry: OS::Heat::None
+      OS::TripleO::Services::Ec2Api: OS::Heat::None
+      OS::TripleO::Services::Etcd: OS::Heat::None
+      OS::TripleO::Services::ExternalSwiftProxy: OS::Heat::None
+      OS::TripleO::Services::Fluentd: OS::Heat::None
+      OS::TripleO::Services::GlanceApi: OS::Heat::None
+      OS::TripleO::Services::GnocchiApi: OS::Heat::None
+      OS::TripleO::Services::GnocchiMetricd: OS::Heat::None
+      OS::TripleO::Services::GnocchiStatsd: OS::Heat::None
+      OS::TripleO::Services::HAproxy: OS::Heat::None
+      OS::TripleO::Services::HAProxyInternalTLS: OS::Heat::None
+      OS::TripleO::Services::HAProxyPublicTLS: OS::Heat::None
+      OS::TripleO::Services::HeatApiCfn: OS::Heat::None
+      OS::TripleO::Services::HeatApiCloudwatch: OS::Heat::None
+      OS::TripleO::Services::HeatEngine: OS::Heat::None
+      OS::TripleO::Services::HeatApi: OS::Heat::None
+      OS::TripleO::Services::Horizon: OS::Heat::None
+      OS::TripleO::Services::IpaClient: OS::Heat::None
+      OS::TripleO::Services::Ipsec: OS::Heat::None
+      OS::TripleO::Services::IronicApi: OS::Heat::None
+      OS::TripleO::Services::IronicInspector: OS::Heat::None
+      OS::TripleO::Services::IronicNeutronAgent: OS::Heat::None
+      OS::TripleO::Services::IronicPxe: OS::Heat::None
+      OS::TripleO::Services::Iscsid: OS::Heat::None
+      OS::TripleO::Services::Keepalived: OS::Heat::None
+      OS::TripleO::Services::Keystone: OS::Heat::None
+      OS::TripleO::Services::Kubernetes::Master: OS::Heat::None
+      OS::TripleO::Services::Kubernetes::Worker: OS::Heat::None
+      OS::TripleO::Services::LiquidioCompute: OS::Heat::None
+      OS::TripleO::Services::Logging::BarbicanApi: OS::Heat::None
+      OS::TripleO::Services::Logging::GlanceApi: OS::Heat::None
+      OS::TripleO::Services::Logging::HAProxy: OS::Heat::None
+      OS::TripleO::Services::Logging::HeatApiCfn: OS::Heat::None
+      OS::TripleO::Services::Logging::HeatApi: OS::Heat::None
+      OS::TripleO::Services::Logging::Keystone: OS::Heat::None
+      OS::TripleO::Services::Logging::NeutronApi: OS::Heat::None
+      OS::TripleO::Services::Logging::NeutronCommon: OS::Heat::None
+      OS::TripleO::Services::Logging::NovaApi: OS::Heat::None
+      OS::TripleO::Services::Logging::NovaCommon: OS::Heat::None
+      OS::TripleO::Services::Logging::NovaLibvirt: OS::Heat::None
+      OS::TripleO::Services::Logging::NovaMetadata: OS::Heat::None
+      OS::TripleO::Services::Logging::OpenDaylightApi: OS::Heat::None
+      OS::TripleO::Services::Logging::PankoApi: OS::Heat::None
+      OS::TripleO::Services::Logging::PlacementApi: OS::Heat::None
+      OS::TripleO::Services::ManilaApi: OS::Heat::None
+      OS::TripleO::Services::ManilaBackendCephFs: OS::Heat::None
+      OS::TripleO::Services::ManilaBackendIsilon: OS::Heat::None
+      OS::TripleO::Services::ManilaBackendNetapp: OS::Heat::None
+      OS::TripleO::Services::ManilaBackendUnity: OS::Heat::None
+      OS::TripleO::Services::ManilaBackendVMAX: OS::Heat::None
+      OS::TripleO::Services::ManilaBackendVNX: OS::Heat::None
+      OS::TripleO::Services::ManilaScheduler: OS::Heat::None
+      OS::TripleO::Services::ManilaShare: OS::Heat::None
+      OS::TripleO::Services::MasqueradeNetworks: OS::Heat::None
+      OS::TripleO::Services::Memcached: OS::Heat::None
+      OS::TripleO::Services::MetricsQdr: OS::Heat::None
+      OS::TripleO::Services::MistralApi: OS::Heat::None
+      OS::TripleO::Services::MistralEngine: OS::Heat::None
+      OS::TripleO::Services::MistralEventEngine: OS::Heat::None
+      OS::TripleO::Services::MistralExecutor: OS::Heat::None
+      OS::TripleO::Services::Multipathd: OS::Heat::None
+      OS::TripleO::Services::MySQL: OS::Heat::None
+      OS::TripleO::Services::NeutronApi: OS::Heat::None
+      OS::TripleO::Services::NeutronAZConfig: OS::Heat::None
+      OS::TripleO::Services::NeutronBgpVpnApi: OS::Heat::None
+      OS::TripleO::Services::NeutronBgpVpnBagpipe: OS::Heat::None
+      OS::TripleO::Services::NeutronCorePlugin: OS::Heat::None
+      OS::TripleO::Services::NeutronCorePluginMidonet: OS::Heat::None
+      OS::TripleO::Services::NeutronCorePluginML2Ansible: OS::Heat::None
+      OS::TripleO::Services::NeutronCorePluginML2Nuage: OS::Heat::None
+      OS::TripleO::Services::NeutronCorePluginML2OVN: OS::Heat::None
+      OS::TripleO::Services::NeutronCorePluginMLNXSDN: OS::Heat::None
+      OS::TripleO::Services::NeutronCorePluginNSX: OS::Heat::None
+      OS::TripleO::Services::NeutronCorePluginNuage: OS::Heat::None
+      OS::TripleO::Services::NeutronCorePluginPlumgrid: OS::Heat::None
+      OS::TripleO::Services::NeutronCorePluginVTS: OS::Heat::None
+      OS::TripleO::Services::NeutronDhcpAgent: OS::Heat::None
+      OS::TripleO::Services::NeutronL2gwAgent: OS::Heat::None
+      OS::TripleO::Services::NeutronL2gwApi: OS::Heat::None
+      OS::TripleO::Services::NeutronL3Agent: OS::Heat::None
+      OS::TripleO::Services::NeutronLbaasv2Agent: OS::Heat::None
+      OS::TripleO::Services::NeutronLbaasv2Api: OS::Heat::None
+      OS::TripleO::Services::NeutronLinuxbridgeAgent: OS::Heat::None
+      OS::TripleO::Services::NeutronMetadataAgent: OS::Heat::None
+      OS::TripleO::Services::NeutronML2FujitsuCfab: OS::Heat::None
+      OS::TripleO::Services::NeutronML2FujitsuFossw: OS::Heat::None
+      OS::TripleO::Services::NeutronNuageVrs: OS::Heat::None
+      OS::TripleO::Services::NeutronOvsAgent: OS::Heat::None
+      OS::TripleO::Services::NeutronServer: OS::Heat::None
+      OS::TripleO::Services::NeutronSfcApi: OS::Heat::None
+      OS::TripleO::Services::NeutronSriovAgent: OS::Heat::None
+      OS::TripleO::Services::NeutronSriovHostConfig: OS::Heat::None
+      OS::TripleO::Services::NeutronVppAgent: OS::Heat::None
+      OS::TripleO::Services::NovaApi: OS::Heat::None
+      OS::TripleO::Services::NovaAZConfig: OS::Heat::None
+      OS::TripleO::Services::NovaCompute: OS::Heat::None
+      OS::TripleO::Services::NovaConductor: OS::Heat::None
+      OS::TripleO::Services::NovaConsoleauth: OS::Heat::None
+      OS::TripleO::Services::NovaIronic: OS::Heat::None
+      OS::TripleO::Services::Novajoin: OS::Heat::None
+      OS::TripleO::Services::NovaLibvirt: OS::Heat::None
+      OS::TripleO::Services::NovaLibvirtGuests: OS::Heat::None
+      OS::TripleO::Services::NovaMetadata: OS::Heat::None
+      OS::TripleO::Services::NovaMigrationTarget: OS::Heat::None
+      OS::TripleO::Services::NovaPlacement: OS::Heat::None
+      OS::TripleO::Services::NovaScheduler: OS::Heat::None
+      OS::TripleO::Services::NovaVncProxy: OS::Heat::None
+      OS::TripleO::Services::Ntp: OS::Heat::None
+      OS::TripleO::Services::OctaviaApi: OS::Heat::None
+      OS::TripleO::Services::OctaviaDeploymentConfig: OS::Heat::None
+      OS::TripleO::Services::OctaviaHealthManager: OS::Heat::None
+      OS::TripleO::Services::OctaviaHousekeeping: OS::Heat::None
+      OS::TripleO::Services::OctaviaWorker: OS::Heat::None
+      OS::TripleO::Services::OpenDaylightApi: OS::Heat::None
+      OS::TripleO::Services::OpenDaylightOvs: OS::Heat::None
+      OS::TripleO::Services::OpenShift::GlusterFS: OS::Heat::None
+      OS::TripleO::Services::OpenShift::Infra: OS::Heat::None
+      OS::TripleO::Services::OpenShift::Master: OS::Heat::None
+      OS::TripleO::Services::OpenShift::Worker: OS::Heat::None
+      OS::TripleO::Services::OsloMessagingNotify: OS::Heat::None
+      OS::TripleO::Services::OsloMessagingRpc: OS::Heat::None
+      OS::TripleO::Services::OVNController: OS::Heat::None
+      OS::TripleO::Services::OVNDBs: OS::Heat::None
+      OS::TripleO::Services::OVNMetadataAgent: OS::Heat::None
+      OS::TripleO::Services::Pacemaker: OS::Heat::None
+      OS::TripleO::Services::PacemakerRemote: OS::Heat::None
+      OS::TripleO::Services::PankoApi: OS::Heat::None
+      OS::TripleO::Services::PlacementApi: OS::Heat::None
+      OS::TripleO::Services::Ptp: OS::Heat::None
+      OS::TripleO::Services::Qdr: OS::Heat::None
+      OS::TripleO::Services::RabbitMQ: OS::Heat::None
+      OS::TripleO::Services::Redis: OS::Heat::None
+      OS::TripleO::Services::RsyslogSidecar: OS::Heat::None
+      OS::TripleO::Services::SaharaApi: OS::Heat::None
+      OS::TripleO::Services::SaharaEngine: OS::Heat::None
+      OS::TripleO::Services::Securetty: OS::Heat::None
+      OS::TripleO::Services::SELinux: OS::Heat::None
+      OS::TripleO::Services::SensuClient: OS::Heat::None
+      OS::TripleO::Services::SkydiveAgent: OS::Heat::None
+      OS::TripleO::Services::SkydiveAnalyzer: OS::Heat::None
+      OS::TripleO::Services::Snmp: OS::Heat::None
+      OS::TripleO::Services::SwiftDispersion: OS::Heat::None
+      OS::TripleO::Services::SwiftProxy: OS::Heat::None
+      OS::TripleO::Services::SwiftRingBuilder: OS::Heat::None
+      OS::TripleO::Services::SwiftStorage: OS::Heat::None
+      OS::TripleO::Services::Tacker: OS::Heat::None
+      OS::TripleO::Services::Tempest: OS::Heat::None
+      OS::TripleO::Services::TLSProxyBase: OS::Heat::None
+      OS::TripleO::Services::TripleoPackages: OS::Heat::None
+      OS::TripleO::Services::TripleoUI: OS::Heat::None
+      OS::TripleO::Services::Tuned: OS::Heat::None
+      OS::TripleO::Services::UndercloudUpgrade: OS::Heat::None
+      OS::TripleO::Services::Vpp: OS::Heat::None
+      OS::TripleO::Services::VRTSHyperScale: OS::Heat::None
+      OS::TripleO::Services::Xinetd: OS::Heat::None
+      OS::TripleO::Services::Zaqar: OS::Heat::None