system-config/playbooks/clouds_layouts.yml
Clark Boylan 0e9e1de2ec Add citycloud private networks, subnets, and routers
This should give us connectivity to the outside world with NAT'd
internal IP addressing.

Note that we can't add the router to the template because the external
network name will be different across clouds and we have to pass in the
subnet lists which may vary as well.

Change-Id: Iea225c71d0d8e644cbaf709554d02d130ad21c18
2017-05-18 08:19:06 -07:00

356 lines
15 KiB
YAML

# This file is not a playbook, is a YAML file containing the resources layouts
# for all the OpenStack Infra clouds.
# It is meant to be passed as an argument to the the Ansible cloud launcher.
profiles:
# Profile to launch AFS server for nodepool.
- name: openstackci-projects
projects:
- name: openstackci
description: OpenStack CI project
domain: default
- name: openstackzuul
description: OpenStack zuul project
domain: default
- name: openstackci-security
security_groups:
- name: default
description: Default security group
security_groups_rules:
- security_group: default
ethertype: IPv4
remote_group: default
state: absent
- security_group: default
ethertype: IPv6
remote_group: default
state: absent
- security_group: default
ethertype: IPv4
remote_ip_prefix: 0.0.0.0/0
- security_group: default
ethertype: IPv6
remote_ip_prefix: ::/0
- name: openstackci-keypairs
keypairs:
- name: infra-root-keys
public_key: |
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLsTZJ8hXTmzjKxYh/7V07mIy8xl2HL+9BaUlt6A6TMsL3LSvaVQNSgmXX5g0XfPWSCKmkZb1O28q49jQI2n7n7+sHkxn0dJDxj1N2oNrzNY7pDuPrdtCijczLFdievygXNhXNkQ2WIqHXDquN/jfLLJ9L0jxtxtsUMbiL2xxZEZcaf/K5MqyPhscpqiVNE1MjE4xgPbIbv8gCKtPpYIIrktOMb4JbV7rhOp5DcSP5gXtLhOF5fbBpZ+szqrTVUcBX0oTYr3iRfOje9WPsTZIk9vBfBtF416mCNxMSRc7KhSW727AnUu85hS0xiP0MRAf69KemG1OE1pW+LtDIAEYp mordred@camelot
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvKYcWK1T7e3PKSFiqb03EYktnoxVASpPoq2rJw2JvhsP0JfS+lKrPzpUQv7L4JCuQMsPNtZ8LnwVEft39k58Kh8XMebSfaqPYAZS5zCNvQUQIhP9myOevBZf4CDeG+gmssqRFcWEwIllfDuIzKBQGVbomR+Y5QuW0HczIbkoOYI6iyf2jB6xg+bmzR2HViofNrSa62CYmHS6dO04Z95J27w6jGWpEOTBjEQvnb9sdBc4EzaBVmxCpa2EilB1u0th7/DvuH0yP4T+X8G8UjW1gZCTOVw06fqlBCST4KjdWw1F/AuOCT7048klbf4H+mCTaEcPzzu3Fkv8ckMWtS/Z9Q== jeblair@operational-necessity
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnfoVhOTkrY7uoebL8PoHXb0Fg4jJqGCbwkxUdNUdheIdbnfyjuRG3iL8WZnzf7nzWnD+IGo6kkAo8BkNMK9L0P0Y+5IjI8NH49KU22tQ1umij4EIf5tzLh4gsqkJmy6QLrlbf10m6UF4rLFQhKzOd4b2H2K6KbP00CIymvbW3BwvNDODM4xRE2uao387qfvXZBUkB0PpRD+7fWPoN58gpFUm407Eba3WwX5PCD+1DD+RVBsG8maIDXerQ7lvFLoSuyMswv1TfkvCj0ZFhSFbfTd2ZysCu6eryFfeixR7NY9SNcp9YTqG6LrxGA7Ci6wz+hycFHXlDrlBgfFJDe5At clark@work
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD3KnRBTH5QPpKjf4RWu4akzYt2gwp796cMkFl5vu8e7G/cHuh4979FeNJXMVP6F3rvZB+yXDHLCU5LBVLq0K+1GbAZT/hH38hpMOIvniwKIquvI6C/drkVPHO6YmVlapw/NI530PGnT/TAqCOycHBO5eF1bYsaqV1yZqvs9v7UZc6J4LukoLZwpmyWZ5P3ltAiiy8+FGq3SLCKWDMmv/Bjz4zTsaNbSWThJi0BydINjC1/0ze5Tyc/XgW1sDuxmmXJxgQp4EvLpronqb2hT60iA52kj8lrmoCIryRpgnbaRA7BrxKF8zIr0ZALHijxEUeWHhFJDIVRGUf0Ef0nrmBv fungi-openstack-2015
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHGuIVB/WxBd7k1R8x2FyfqT6KxRnoM7lE5RE8gvBk2r8cQeH5k1c+P5JrBvWpmqXv4satoivYOBiIb7JXEgIxx62YUx/JQ0J7k3w+av6h4iFe2OhOtEOjMF5F8/wO8a/95OeTZPzBZlUfA3hx754kuw3Q/aBKQUOHWxJOIedGyVHeJc7XiFj3RXIufFuUfng9+p4Z3q6d2/WpuKqs00WI0CLF17PkU4i8P9CraJR1dmsWW6zoxMT2G+DwMFI7ZMS3xrVBRuLwrLlbylVLW2kOJ0JeyjHnRh7X1kR7KG3cGOOjA1YQ0e+mXvremcO3/3o6Iop/N1AtqVuYCKlZc7Y9 slukjanov@mirantis.com
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDL9x1rhTVOEQEanrN+ecycaDtAbbh3kr41Rxx7galtLq0JwftjsZqv2Vwl9c8ARmm8HiHcLwDoaZB9gvs6teMScCB+5a1fcohiycJBl2olNFRzkGapDaTvl74aLXQBWaV84D8tUavEl26zcgwrv9WLUsy9pnHoo5K0BzbK7vT2g3VictCphveC2vdjCDeptocWvt4zxCmAY6O7QMKeUjKMlvuy+zCohJcR4BbDnw8EriFAmCeQZcAgfLTyeAvjo384NNIFWyhCwvbCLvpgTplMCp896DWLlXu9eaGUCNjT/sZM8zafAXbfc6OKYFQ5iANAiJktWwKaUaphJkbSVWT5 elizabeth@r2d2
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC3onVLOZiiGpQWTCIV0QwHmc3Jvqyl7UaJxIu7D49OQcLHqVZsozI9pSiCdTnWyAaM+E+5wD9yVcSTqMWqn2AZmZSwQ+Fh6KnCgPZ/o63+iCZPGL0RNk20M1iNh5dvdStDnn+j2fpeV/JONF0tBn07QvNL2eF4BwtbTG9Zhl186QNsXjXDghrSO3Etl6DSfcUhxyvMoA2LnclWWD5hLmiRhcBm+PIxveVsr4B+o0k1HV5SUOvJMWtbEC37AH5I818O4fNOob6CnOFaCsbA9oUDzB5rqxutPZb9SmNJpNoLqYqDgyppM0yeql0Kn97tUt7H4j5xHrWoGnJ4IXfuDc0AMmmy4fpcLGkNf7zcBftKS6iz/3AlOXjlp5WZvKxngJj9HIir2SE/qV4Lxw9936BzvAcQyw5+bEsLQJwi+LPZxEqLC6oklkX9dg/+1yBFHsz6mulA0b4Eq7VF9omRzrhhN4iPpU5KQYPRNz7yRYckXDxYnp2lz6yHgSYh2/lqMc+UqmCL9EAWcDw3jsgvJ6kH/YUVUojiRHD9QLqlhOusu1wrTfojjwF05mqkXKmH+LH8f8AJAlMdYg0c2WLlrcxnwCkLLxzU5cYmKcZ41LuLtQR3ik+EKjYzBXXyCEzFm6qQEbR2akpXyxvONgrf7pijrgNOi0GeatUt0bUQcAONYw== jhesketh@infra
ssh-rsa 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 nibz@hertz
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSR2NmJC8PSanHUpKJuaMmohG80COO2IPkE3Mxhr7US8P1B3p1c6lOrT6M1txRzBY8FlbxfOinGtutP+ADCB2taXfpO8UiaG9eOqojAT/PeP2Y2ov72rVMSWupLozUv2uAR5yyFVFHOjKPYGAa01aJtfzfJujSak8dM0ifFeFwgp/8RBGEfC7atq+45TdrfAURRcEgcOLiF5Aq6fprCOwpllnrH6VoId9YS7u/5xF2/zBjr9PuOP7jEgCaL/+FNqu7jgj87aG5jiZPlweb7GTLJON9H6eFpyfpoJE0sZ1yR9Q+e9FAqQIA44Zi748qKBlFKbLxzoC4mc0SbNUAleEL yolanda@infra
ssh-rsa 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 rcarrillocruz@infra
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILOjz+dkwRWTJcW9Gt3iGHSzRBsvVlTAK6G2oH3+0D41 iwienand+osinfra@redhat.com
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdzEzB2KpNLTTFJGLCNMY53sja37PXFzHHdjWEGaZtaTcuCn/ufV9ql5yhS5/414u9swoHM71H00+nT4uSWcXc2tTRXYWslaiwU47DOtQsD//CvGgIFBNO1EinWhYa5uTSfxI+Z/x4PBu7XFq5wi/JCfJ+iHIWsvXn8U44r1csURcZU0GMPAVG1MO+s3p1W7daVqF9RR7UuwCECb3hdPN1N/M4s6myBiuRXCeDND98dKLf8b342hw+pWvQ3g/OCLcVlYPWT4fy1YGQT8hT+jA2XPfwCtu/k7HKAGH3E8UcnBtY/RI9ibciIFe+Ro7q8t+tp5SgjGLq1NnE4Yp5rpsh david@koala
ssh-rsa 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 pabelanger@redhat.com
- name: openstackci-flavors
flavors:
- name: nodepool
ram: 8192
vcpus: 8
disk: 80
- name: mirror
ram: 8192
vcpus: 4
disk: 100
- name: openstackci-images
images:
- name: ubuntu-trusty
download_image_url: https://cloud-images.ubuntu.com/trusty/current/trusty-server-cloudimg-amd64-disk1.img
download_image_dest: /tmp/ubuntu-trusty.img
filename: /tmp/ubuntu-trusty.img
- name: admin-roles
roles:
- name: Member
- name: openstackci-user-roles
user_roles:
- role: Member
user: openstackci
project: openstackci
- name: openstackzuul-user-roles
user_roles:
- role: Member
user: openstackzuul
project: openstackzuul
- name: openstackci-networking
networks:
- name: openstackci-network1
subnets:
- name: openstackci-subnet1
network_name: openstackci-network1
cidr: '10.0.1.0/24'
- name: openstackzuul-networking
networks:
- name: openstackzuul-network1
subnets:
- name: openstackzuul-subnet1
network_name: openstackzuul-network1
cidr: '10.0.1.0/24'
clouds:
# bluebox-sjc1
- name: admin-bluebox
profiles:
- openstackci-projects
- openstackci-flavors
- name: openstackci-bluebox
profiles:
- openstackci-keypairs
- openstackci-security
- name: openstackzuul-bluebox
profiles:
- openstackci-keypairs
- openstackci-security
# osic-cloud1
- name: openstackci-osic-cloud1
profiles:
- openstackci-keypairs
- openstackci-security
- name: openstackjenkins-osic-cloud1
profiles:
- openstackci-keypairs
- openstackci-security
# ovh
- name: openstackci-ovh-bhs1
oscc_cloud: openstackci-ovh
region_name: BHS1
profiles:
- openstackci-keypairs
- openstackci-security
- name: openstackjenkins-ovh-bhs1
oscc_cloud: openstackjenkins-ovh
region_name: BHS1
profiles:
- openstackci-keypairs
- openstackci-security
- name: openstackci-ovh-gra1
oscc_cloud: openstackci-ovh
region_name: GRA1
profiles:
- openstackci-keypairs
- openstackci-security
- name: openstackjenkins-ovh-gra1
oscc_cloud: openstackjenkins-ovh
region_name: GRA1
profiles:
- openstackci-keypairs
- openstackci-security
# internap
- name: openstackci-internap-mtl01
oscc_cloud: openstackci-internap
region_name: mtl01
profiles:
- openstackci-keypairs
- openstackci-security
- name: openstackjenkins-internap-mtl01
oscc_cloud: openstackjenkins-internap
region_name: mtl01
profiles:
- openstackci-keypairs
- openstackci-security
# rackspace
- name: openstackci-rax-dfw
oscc_cloud: openstackci-rax
region_name: DFW
profiles:
- openstackci-keypairs
- name: openstackjenkins-rax-dfw
oscc_cloud: openstackjenkins-rax
region_name: DFW
profiles:
- openstackci-keypairs
- name: openstackci-rax-ord
oscc_cloud: openstackci-rax
region_name: ORD
profiles:
- openstackci-keypairs
- name: openstackjenkins-rax-ord
oscc_cloud: openstackjenkins-rax
region_name: ORD
profiles:
- openstackci-keypairs
- name: openstackci-rax-iad
oscc_cloud: openstackci-rax
region_name: IAD
profiles:
- openstackci-keypairs
- name: openstackjenkins-rax-iad
oscc_cloud: openstackjenkins-rax
region_name: IAD
profiles:
- openstackci-keypairs
# tripleo-test-cloud-rh1
- name: openstackci-tripleo-test-cloud-rh1
profiles:
- openstackci-keypairs
- openstackci-security
- name: openstackzuul-tripleo-test-cloud-rh1
profiles:
- openstackci-keypairs
- openstackci-security
# infracloud-vanilla
- name: admin-infracloud-vanilla
profiles:
- openstackci-projects
- openstackci-flavors
- admin-roles
- openstackci-user-roles
- openstackzuul-user-roles
- name: openstackci-infracloud-vanilla
profiles:
- openstackci-keypairs
- openstackci-security
- openstackci-images
- name: openstackzuul-infracloud-vanilla
profiles:
- openstackci-keypairs
- openstackci-security
# infracloud-chocolate
- name: admin-infracloud-chocolate
profiles:
- openstackci-projects
- openstackci-flavors
- admin-roles
- openstackci-user-roles
- openstackzuul-user-roles
- name: openstackci-infracloud-chocolate
profiles:
- openstackci-keypairs
- openstackci-security
- openstackci-images
- name: openstackzuul-infracloud-chocolate
profiles:
- openstackci-keypairs
- openstackci-security
# Citycloud
- name: openstackci-citycloud-Lon1
oscc_cloud: openstackci-citycloud
region_name: Lon1
profiles:
- openstackci-keypairs
- openstackci-security
- openstackci-networking
routers:
- name: openstackci-router1
network: ext-net
interfaces:
- openstackci-subnet1
- name: openstackzuul-citycloud-Lon1
oscc_cloud: openstackzuul-citycloud
region_name: Lon1
profiles:
- openstackci-keypairs
- openstackci-security
- openstackzuul-networking
routers:
- name: openstackzuul-router1
network: ext-net
interfaces:
- openstackzuul-subnet1
- name: openstackci-citycloud-La1
oscc_cloud: openstackci-citycloud
region_name: La1
profiles:
- openstackci-keypairs
- openstackci-security
- openstackci-networking
routers:
- name: openstackci-router1
network: ext-net
interfaces:
- openstackci-subnet1
- name: openstackzuul-citycloud-La1
oscc_cloud: openstackzuul-citycloud
region_name: La1
profiles:
- openstackci-keypairs
- openstackci-security
- openstackzuul-networking
routers:
- name: openstackzuul-router1
network: ext-net
interfaces:
- openstackzuul-subnet1
- name: openstackci-citycloud-Kna1
oscc_cloud: openstackci-citycloud
region_name: Kna1
profiles:
- openstackci-keypairs
- openstackci-security
- openstackci-networking
routers:
- name: openstackci-router1
network: ext-net
interfaces:
- openstackci-subnet1
- name: openstackzuul-citycloud-Kna1
oscc_cloud: openstackzuul-citycloud
region_name: Kna1
profiles:
- openstackci-keypairs
- openstackci-security
- openstackzuul-networking
routers:
- name: openstackzuul-router1
network: ext-net
interfaces:
- openstackzuul-subnet1
- name: openstackci-citycloud-Sto2
oscc_cloud: openstackci-citycloud
region_name: Sto2
profiles:
- openstackci-keypairs
- openstackci-security
- openstackci-networking
routers:
- name: openstackci-router1
network: ext-net
interfaces:
- openstackci-subnet1
- name: openstackzuul-citycloud-Sto2
oscc_cloud: openstackzuul-citycloud
region_name: Sto2
profiles:
- openstackci-keypairs
- openstackci-security
- openstackzuul-networking
routers:
- name: openstackzuul-router1
network: ext-net
interfaces:
- openstackzuul-subnet1