########## Heat Template ##########
description: Generated template
heat_template_version: 2013-05-23
parameters:
  router_0_external_network:
    default: 2ee9a82d-7f72-4a45-92bb-24e7be2b4abe
    description: Router external network
    type: string
  server_0_flavor:
    default: m1.medium
    description: Flavor to use for server server_0
    type: string
  server_0_image:
    default: demo-Squid1
    description: Image to use to boot server server_0
    type: string
  server_1_flavor:
    default: SAM-Central
    description: Flavor to use for server server_1
    type: string
  server_1_image:
    default: demo-WiFiManager
    description: Image to use to boot server server_1
    type: string
  server_2_flavor:
    default: UTM
    description: Flavor to use for server server_2
    type: string
  server_2_image:
    default: demo-UTM
    description: Image to use to boot server server_2
    type: string
  server_3_flavor:
    default: Opuntia-Small
    description: Flavor to use for server server_3
    type: string
  server_3_image:
    default: demo-Opuntia
    description: Image to use to boot server server_3
    type: string
  server_5_flavor:
    default: SAM
    description: Flavor to use for server server_5
    type: string
  server_5_image:
    default: demo-TrafficAnalysis
    description: Image to use to boot server server_5
    type: string
  server_6_flavor:
    default: Opuntia-VPN
    description: Flavor to use for server server_6
    type: string
  server_6_image:
    default: demo-VPN-Concentrator
    description: Image to use to boot server server_6
    type: string
resources:
  server1_port:
    type: OS::Neutron::Port
    properties:
      network_id:
        get_resource: network_2
      fixed_ips:
        - subnet_id:
            get_resource: subnet_1
  server2_port:
    type: OS::Neutron::Port
    properties:
      network_id:
        get_resource: network_2
      fixed_ips:
        - subnet_id:
            get_resource: subnet_1
  server3_port:
    type: OS::Neutron::Port
    properties:
      network_id:
        get_resource: network_2
      fixed_ips:
        - subnet_id:
            get_resource: subnet_1
  server5_port:
    type: OS::Neutron::Port
    properties:
      network_id:
        get_resource: network_2
      fixed_ips:
        - subnet_id:
            get_resource: subnet_1
  server5_floating_ip:
    type: OS::Neutron::FloatingIPAssociation
    properties:
      floatingip_id: 5bb26a4f-4809-4c3e-8e26-6d1b1f28c632
      port_id: { get_resource: server5_port }
  server6_port:
    type: OS::Neutron::Port
    properties:
      network_id:
        get_resource: network_2
      fixed_ips:
        - subnet_id:
            get_resource: subnet_1
  server6_floating_ip:
    type: OS::Neutron::FloatingIPAssociation
    properties:
      floatingip_id: 5729f63b-385a-4d3a-93bb-27bb03c4b1cc
      port_id: { get_resource: server6_port }
  key_0:
    properties:
      name: Scott
      public_key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH34pV1BG5yRQDDFwduB0xHPXr3fqzr0oHIO18r0K4WK9Sf4a4OgkU7zB2ZGrsH6Cj8d+nlJHTN9c5ML43vXwrXJwBSMM7jcviY/9rDc6Zqx6AhBKi2URB9RdeKl53vsECl58M8EiixkUmaWZng05AYJgcwmiehhOdvx8GeSKMzZhw14hu+t5PNpAS+7Ae+wZtUW9u90bssTw+yIA0Qi99GE5Ci8YI9rRDwhd4tOljeqJvD2mZyOZ6XnsnFTQnYvw0GcoKRayhwsZjT+mtfJ2hKW1z8imf1yWugcyD3hKTlWCGi+GCERhSgvG6h3UNmLKN1U9SeczgmvzAqw2EMcQ1
        syoder@scott
    type: OS::Nova::KeyPair
  network_0:
    properties:
      admin_state_up: true
      name: SquidCache
      shared: false
    type: OS::Neutron::Net
  network_1:
    properties:
      admin_state_up: true
      name: VPN
      shared: false
    type: OS::Neutron::Net
  network_2:
    properties:
      admin_state_up: true
      name: Internet
      shared: false
    type: OS::Neutron::Net
  network_3:
    properties:
      admin_state_up: true
      name: SAM-SPAN-PLACEHOLDER
      shared: false
    type: OS::Neutron::Net
  network_5:
    properties:
      admin_state_up: true
      name: Admin
      shared: false
    type: OS::Neutron::Net
  network_6:
    properties:
      admin_state_up: true
      name: SAM-UTM
      shared: false
    type: OS::Neutron::Net
  network_8:
    properties:
      admin_state_up: true
      name: Opuntia-SAM
      shared: false
    type: OS::Neutron::Net
  router_0:
    properties:
      admin_state_up: true
      name: gw01
    type: OS::Neutron::Router
  router_0_gateway:
    properties:
      network_id:
        get_param: router_0_external_network
      router_id:
        get_resource: router_0
    type: OS::Neutron::RouterGateway
  router_0_interface_0:
    properties:
      router_id:
        get_resource: router_0
      subnet_id:
        get_resource: subnet_1
    type: OS::Neutron::RouterInterface
  router_0_interface_1:
    properties:
      router_id:
        get_resource: router_0
      subnet_id:
        get_resource: subnet_0
    type: OS::Neutron::RouterInterface
  security_group_0:
    properties:
      description: default
      name: _default
      rules:
      - direction: ingress
        ethertype: IPv4
        remote_mode: remote_group_id
      - direction: egress
        ethertype: IPv6
      - direction: egress
        ethertype: IPv4
      - direction: ingress
        ethertype: IPv4
        remote_ip_prefix: 0.0.0.0/0
      - direction: ingress
        ethertype: IPv6
        remote_mode: remote_group_id
    type: OS::Neutron::SecurityGroup
  server_0:
    properties:
      diskConfig: AUTO
      flavor:
        get_param: server_0_flavor
      image:
        get_param: server_0_image
      key_name:
        get_resource: key_0
      name: Squid1
      networks:
      - network:
          get_resource: network_0
    type: OS::Nova::Server
  server_1:
    properties:
      diskConfig: AUTO
      flavor:
        get_param: server_1_flavor
      image:
        get_param: server_1_image
      key_name:
        get_resource: key_0
      name: WiFiManager
      networks:
      - port:
          get_resource: server1_port
      - network:
          get_resource: network_1
      - network:
          get_resource: network_5
    type: OS::Nova::Server
  server_2:
    properties:
      diskConfig: AUTO
      flavor:
        get_param: server_2_flavor
      image:
        get_param: server_2_image
      key_name:
        get_resource: key_0
      name: UTM
      networks:
      - network:
          get_resource: network_6
      - network:
          get_resource: network_1
      - port:
          get_resource: server2_port
    type: OS::Nova::Server
  server_3:
    properties:
      diskConfig: AUTO
      flavor:
        get_param: server_3_flavor
      image:
        get_param: server_3_image
      key_name:
        get_resource: key_0
      name: Opuntia
      networks:
      - port:
          get_resource: server3_port
      - network:
          get_resource: network_8
      - network:
          get_resource: network_0
    type: OS::Nova::Server
  server_5:
    properties:
      diskConfig: AUTO
      flavor:
        get_param: server_5_flavor
      image:
        get_param: server_5_image
      key_name:
        get_resource: key_0
      name: TrafficAnalysis
      networks:
      - network:
          get_resource: network_8
      - network:
          get_resource: network_6
      - network:
          get_resource: network_3
      - port:
          get_resource: server5_port
      user_data_format: RAW
      user_data:
        str_replace:
          template: |
            #!/bin/bash -v
            cat << EOF >> /etc/hosts
            $soc_ip soc.lan
            $noc_ip noc.lan
            $wifi_ip wifi-admin.lan
            EOF
          params:
            $soc_ip : {get_attr: [server_2, first_address]}
            $noc_ip : 127.0.0.1
            $wifi_ip : {get_attr: [server_1, first_address]}
    type: OS::Nova::Server
  server_6:
    properties:
      diskConfig: AUTO
      flavor:
        get_param: server_6_flavor
      image:
        get_param: server_6_image
      key_name:
        get_resource: key_0
      name: VPN-Concentrator
      networks:
      - port:
          get_resource: server6_port
      - network:
          get_resource: network_1
      - network:
          get_resource: network_5
    type: OS::Nova::Server
  subnet_0:
    properties:
      allocation_pools:
      - end: 172.17.254.254
        start: 172.17.0.2
      cidr: 172.17.0.0/16
      dns_nameservers:
      - 8.8.4.4
      - 8.8.8.8
      enable_dhcp: true
      host_routes: []
      ip_version: 4
      name: Admin
      network_id:
        get_resource: network_5
    type: OS::Neutron::Subnet
  subnet_1:
    properties:
      allocation_pools:
      - end: 172.18.0.254
        start: 172.18.0.2
      cidr: 172.18.0.0/24
      dns_nameservers:
      - 8.8.4.4
      - 8.8.8.8
      enable_dhcp: true
      host_routes: []
      ip_version: 4
      name: Internet
      network_id:
        get_resource: network_2
    type: OS::Neutron::Subnet
  subnet_3:
    properties:
      allocation_pools:
      - end: 172.18.1.254
        start: 172.18.1.2
      cidr: 172.18.1.0/24
      dns_nameservers:
      - 8.8.4.4
      - 8.8.8.8
      enable_dhcp: true
      host_routes: []
      ip_version: 4
      name: VPN
      network_id:
        get_resource: network_1
    type: OS::Neutron::Subnet
  subnet_4:
    properties:
      allocation_pools:
      - end: 172.18.2.254
        start: 172.18.2.2
      cidr: 172.18.2.0/24
      dns_nameservers: []
      enable_dhcp: true
      host_routes: []
      ip_version: 4
      name: Opuntia-SAM
      network_id:
        get_resource: network_8
    type: OS::Neutron::Subnet
  subnet_6:
    properties:
      allocation_pools:
      - end: 172.17.255.254
        start: 172.17.255.2
      cidr: 172.17.255.0/24
      dns_nameservers: []
      enable_dhcp: false
      host_routes: []
      ip_version: 4
      name: SAM-SPAN-PLACEHOLDER
      network_id:
        get_resource: network_3
    type: OS::Neutron::Subnet
  subnet_7:
    properties:
      allocation_pools:
      - end: 172.18.3.254
        start: 172.18.3.2
      cidr: 172.18.3.0/24
      dns_nameservers: []
      enable_dhcp: true
      host_routes: []
      ip_version: 4
      name: SAM-UTM
      network_id:
        get_resource: network_6
    type: OS::Neutron::Subnet
  subnet_8:
    properties:
      allocation_pools:
      - end: 172.18.4.254
        start: 172.18.4.10
      cidr: 172.18.4.0/24
      dns_nameservers:
      - 8.8.4.4
      - 8.8.8.8
      enable_dhcp: true
      host_routes: []
      ip_version: 4
      name: SquidCache
      network_id:
        get_resource: network_0
    type: OS::Neutron::Subnet