64f2e39728
Custom role deployments were not working when ODL API was on a different
node due to firewall rules blocking traffic. This patch adds the
missing rules for the REST communication to ODL (8081 by default), OVSDB
connection (6640), and OpenFlow protocol (6653).
Closes-Bug: 1651476
Depends-On: I1f2af2793d040fda17bf73252afe59434d99f31f
Change-Id: Ic0119c783d01e864c49fa06a66fdd68c059a726b
Signed-off-by: Tim Rozet <trozet@redhat.com>
(cherry picked from commit 22ba81cf9d)
71 lines
2.3 KiB
YAML
71 lines
2.3 KiB
YAML
heat_template_version: 2016-04-08
|
|
|
|
description: >
|
|
OpenDaylight SDN Controller.
|
|
|
|
parameters:
|
|
OpenDaylightPort:
|
|
default: 8081
|
|
description: Set opendaylight service port
|
|
type: number
|
|
OpenDaylightUsername:
|
|
default: 'admin'
|
|
description: The username for the opendaylight server.
|
|
type: string
|
|
OpenDaylightPassword:
|
|
default: 'admin'
|
|
type: string
|
|
description: The password for the opendaylight server.
|
|
hidden: true
|
|
OpenDaylightEnableL3:
|
|
description: Knob to enable/disable ODL L3
|
|
type: string
|
|
default: 'no'
|
|
OpenDaylightEnableDHCP:
|
|
description: Knob to enable/disable ODL DHCP Server
|
|
type: boolean
|
|
default: false
|
|
OpenDaylightFeatures:
|
|
description: List of features to install with ODL
|
|
type: comma_delimited_list
|
|
default: ["odl-netvirt-openstack","odl-netvirt-ui"]
|
|
OpenDaylightApiVirtualIP:
|
|
type: string
|
|
default: ''
|
|
EndpointMap:
|
|
default: {}
|
|
description: Mapping of service endpoint -> protocol. Typically set
|
|
via parameter_defaults in the resource registry.
|
|
type: json
|
|
ServiceNetMap:
|
|
default: {}
|
|
description: Mapping of service_name -> network name. Typically set
|
|
via parameter_defaults in the resource registry. This
|
|
mapping overrides those in ServiceNetMapDefaults.
|
|
type: json
|
|
DefaultPasswords:
|
|
default: {}
|
|
type: json
|
|
|
|
outputs:
|
|
role_data:
|
|
description: Role data for the OpenDaylight service.
|
|
value:
|
|
service_name: opendaylight_api
|
|
config_settings:
|
|
opendaylight::odl_rest_port: {get_param: OpenDaylightPort}
|
|
opendaylight::username: {get_param: OpenDaylightUsername}
|
|
opendaylight::password: {get_param: OpenDaylightPassword}
|
|
opendaylight::enable_l3: {get_param: OpenDaylightEnableL3}
|
|
opendaylight::extra_features: {get_param: OpenDaylightFeatures}
|
|
opendaylight::enable_dhcp: {get_param: OpenDaylightEnableDHCP}
|
|
opendaylight::odl_bind_ip: {get_param: [ServiceNetMap, OpendaylightApiNetwork]}
|
|
tripleo.opendaylight_api.firewall_rules:
|
|
'137 opendaylight api':
|
|
dport:
|
|
- {get_param: OpenDaylightPort}
|
|
- 6640
|
|
- 6653
|
|
step_config: |
|
|
include tripleo::profile::base::neutron::opendaylight
|