diff --git a/openstack/README.md b/openstack/README.md
new file mode 100644
index 0000000..6c7c66b
--- /dev/null
+++ b/openstack/README.md
@@ -0,0 +1,239 @@
+📙 **Disclaimer: Community supported repository. Not supported by Mesosphere directly.**
+
+# Open DC/OS on OpenStack with Terraform
+
+## Things to Know
+
+The current implemenetation ...
+
+* Does setup a working DC/OS cluster on OpenStack
+* Does not setup or use OpenStack load balancers
+* Does apply floating IPs on the bootstrap and master nodes
+* Does create separate security groups for bootstrap, master, public agent, and private agent.  Currently, all the security groups are the same and very open.
+* Does not use OpenStack compute server groups.  Should we?
+* Does use cloud init to partially provision servers and not via remote ssh execution
+* Has been tested with CoreOS
+* Has not been tested with CentOS
+* Defaults to static DC/OS master discovery
+* Has not been tested with exhibitor 
+
+Was tested with OpenStack Mirantis for DC/OS version 1.11.
+
+## Getting Started
+
+### Configure your Cloud Provider Credentials
+
+[Source your OpenStack RC file](https://docs.openstack.org/zh_CN/user-guide/common/cli-set-environment-variables-using-openstack-rc.html) and activate it by running the shell script.
+
+### Pull down the DC/OS terraform scripts below
+
+There is a module called `dcos-tested-openstack-oses` that contains all the tested scripts per operating system. The deployment strategy is based on a bare image coupled with a prereq `script.sh` to get it ready to install dcos-core components.
+
+OS | Version | Tested
+---|---------|-------
+CoreOS | 1576.4.0 | Yes
+
+NOTE: The default value for the variable `os` is `coreos`.
+
+### Quick Start
+
+We've provided sensible defaults that you would want to play around with DC/OS for setting up DC/OS.  The default will setup a multi-master deployment. Three agents will be deployed for you. Two private agents, one public agent.
+
+There are several OpenStack related [variables](/openstack/variables.tf) that must be provided because these are unique to the OpenStack install that is being used:
+
+* `master_instance_flavor`
+* `bootstrap_instance_flavor`
+* `private_agent_instance_flavor`
+* `public_agent_instance_flavor`
+* `os_floating_ip_pool`
+* `os_image_name`
+* `os_external_network_id`
+
+You can create a [tfvars file](https://www.terraform.io/intro/getting-started/variables.html) to store the appropriate values for the required variables above.  Assume that your tfvars file is called `desired_cluster_profile.tfvars`.
+
+- There is no git clone of this repo required. Terraform does this for you under the hood.
+
+_*Note:* Create a new directory before the command below as terraform will write its files within the current directory._
+
+```bash
+mkdir dcos-installer
+cd dcos-installer
+terraform init -from-module github.com/dcos/terraform-dcos//openstack
+terraform apply -var-file desired_cluster_profile.tfvars
+```
+
+#### Advance YAML Configuration
+
+We have designed this project to be flexible. Here are the example working variables that allows very deep customization by using a single `tfvars` file.
+
+For advance users with stringent requirements, here are the DC/OS flags examples where you can simply paste your YAML configuration in your desired_cluster_profile.tfvars. The alternative to YAML is to convert it to JSON.
+
+```bash
+$ cat desired_cluster_profile.tfvars
+dcos_version = "1.10.2"
+os = "centos_7.3"
+num_of_masters = "3"
+num_of_private_agents = "2"
+num_of_public_agents = "1"
+expiration = "6h"
+dcos_security = "permissive"
+dcos_cluster_docker_credentials_enabled =  "true"
+dcos_cluster_docker_credentials_write_to_etc = "true"
+dcos_cluster_docker_credentials_dcos_owned = "false"
+dcos_cluster_docker_registry_url = "https://index.docker.io"
+dcos_use_proxy = "yes"
+dcos_http_proxy = "example.com"
+dcos_https_proxy = "example.com"
+dcos_no_proxy = <<EOF
+# YAML
+ - "internal.net"
+ - "168.63.129.16"
+EOF
+dcos_overlay_network = <<EOF
+# YAML
+    vtep_subnet: 44.128.0.0/20
+    vtep_mac_oui: 70:B3:D5:00:00:00
+    overlays:
+      - name: dcos
+        subnet: 12.0.0.0/8
+        prefix: 26
+EOF
+dcos_rexray_config = <<EOF
+# YAML
+  rexray:
+    loglevel: warn
+    modules:
+      default-admin:
+        host: tcp://127.0.0.1:61003
+    storageDrivers:
+    - ec2
+    volume:
+      unmount:
+        ignoreusedcount: true
+EOF
+dcos_cluster_docker_credentials = <<EOF
+# YAML
+  auths:
+    'https://index.docker.io/v1/':
+      auth: Ze9ja2VyY3licmljSmVFOEJrcTY2eTV1WHhnSkVuVndjVEE=
+EOF
+ssh_pub_key = "INSERT_PUBLIC_KEY_HERE"
+```
+_Note: The YAML comment is required for the DC/OS specific YAML settings._
+
+## Upgrading DC/OS  
+
+You can upgrade your DC/OS cluster with a single command. This terraform script was built to perform installs and upgrades from the inception of this project. With the upgrade procedures below, you can also have finer control on how masters or agents upgrade at a given time. This will give you the ability to change the parallelism of master or agent upgrades.
+
+### DC/OS Upgrades
+
+#### Rolling Upgrade
+###### Supported upgraded by dcos.io
+
+##### Prerequisite:
+Update your terraform scripts to gain access to the latest DC/OS version with this command below:
+
+```
+terraform get --update
+```
+
+##### Masters Sequentially, Agents Parellel:
+```bash
+terraform apply -var-file desired_cluster_profile.tfvars -var state=upgrade -target null_resource.bootstrap -target null_resource.master -parallelism=1
+terraform apply -var-file desired_cluster_profile.tfvars -var state=upgrade
+```
+
+##### All Roles Simultaniously
+###### Not supported by dcos.io but it works without dcos_skip_checks enabled.
+
+```bash
+terraform apply -var-file desired_cluster_profile.tfvars -var state=upgrade
+```
+
+## Maintenance
+
+If you would like to add more or remove (private) agents or public agents from your cluster, you can do so by telling terraform your desired state and it will make sure it gets you there.
+
+### Adding Agents
+
+```bash
+# update num_of_private_agents = "5" in desired_cluster_profile.tfvars
+terraform apply -var-file desired_cluster_profile.tfvars
+```
+
+### Removing Agents
+
+```bash
+# update num_of_private_agents = "2" in desired_cluster_profile.tfvars
+terraform apply -var-file desired_cluster_profile.tfvars
+```
+
+**Important**: Always remember to save your desired state in your `desired_cluster_profile.tfvars`
+
+## Redeploy an existing Master
+
+If you wanted to redeploy a problematic master (ie. storage filled up, not responsive, etc), you can tell terraform to redeploy during the next cycle.
+
+**NOTE:** This only applies to DC/OS clusters that have set their `dcos_master_discovery` to `master_http_loadbalancer` and not `static`.
+
+### Master Node
+
+#### Taint Master Node
+
+```bash
+terraform taint openstack_compute_instance_v2.masters.0 # The number represents the agent in the list
+```
+
+#### Redeploy Master Node
+
+```bash
+terraform apply -var-file desired_cluster_profile.tfvars
+```
+
+## Redeploy an existing Agent
+
+If you wanted to redeploy a problematic agent, (ie. storage filled up, not responsive, etc), you can tell terraform to redeploy during the next cycle.
+
+
+### Private Agents
+
+#### Taint Private Agent
+
+```bash
+terraform taint openstack_compute_instance_v2.agent.0 # The number represents the agent in the list
+```
+
+#### Redeploy Agent
+
+```bash
+terraform apply -var-file desired_cluster_profile.tfvars
+```
+
+
+### Public Agents
+
+#### Taint Private Agent
+
+```bash
+terraform taint openstack_compute_instance_v2.public-agent.0 # The number represents the agent in the list
+```
+
+#### Redeploy Agent
+
+```bash
+terraform apply -var-file desired_cluster_profile.tfvars
+```
+
+### Experimental
+
+#### Adding GPU Private Agents
+
+Coming soon!
+
+### Destroy Cluster
+
+You can shutdown/destroy all resources from your environment by running this command below
+
+```bash
+terraform destroy -var-file desired_cluster_profile.tfvars
+```
diff --git a/openstack/bootstrap.tf b/openstack/bootstrap.tf
new file mode 100644
index 0000000..b14b607
--- /dev/null
+++ b/openstack/bootstrap.tf
@@ -0,0 +1,262 @@
+# Bootstrap Node
+
+
+resource "openstack_networking_floatingip_v2" "bootstrap" {
+  pool = "${var.os_floating_ip_pool}"
+}
+
+resource "openstack_compute_floatingip_associate_v2" "bootstrap" {
+  floating_ip = "${openstack_networking_floatingip_v2.bootstrap.address}"
+  instance_id = "${openstack_compute_instance_v2.bootstrap.id}"
+}
+
+# Select boot node VM type
+data "openstack_compute_flavor_v2" "bootstrap" {
+  name = "${var.bootstrap_instance_flavor}"
+}
+
+
+# Create bootstrap security group
+resource "openstack_networking_secgroup_v2" "bootstrap_security_group" {
+  name = "${data.template_file.cluster-name.rendered}-bootstrap-security-group"
+}
+
+resource "openstack_networking_secgroup_rule_v2" "bootstrap_secgroup_rule_ingress" {
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  security_group_id = "${openstack_networking_secgroup_v2.bootstrap_security_group.id}"
+}
+
+
+resource "openstack_networking_port_v2" "bootstrap_port" {
+  name                  = "${data.template_file.cluster-name.rendered}-bootstrap-port"
+  network_id            = "${openstack_networking_network_v2.vnet.id}"
+  admin_state_up        = "true"
+  security_group_ids    = ["${openstack_networking_secgroup_v2.bootstrap_security_group.id}"]
+
+  fixed_ip {
+    subnet_id           = "${openstack_networking_subnet_v2.public.id}"
+  }
+}
+
+
+resource "openstack_compute_instance_v2" "bootstrap" {
+  name              = "${data.template_file.cluster-name.rendered}-bootstrap"
+  image_id          = "${data.openstack_images_image_v2.selected_image.id}"
+  flavor_id         = "${data.openstack_compute_flavor_v2.bootstrap.id}"
+  key_pair          = "${openstack_compute_keypair_v2.keypair.name}"
+  user_data         = "${module.openstack-tested-oses.os_user_data}"
+
+  metadata {
+    Name       = "${coalesce(var.owner, data.external.whoami.result["owner"])}"
+    expiration = "${var.expiration}"
+  }
+
+  network {
+    port = "${openstack_networking_port_v2.bootstrap_port.id}"
+  }
+
+}
+
+
+# Create DCOS Mesos Bootstrap Scripts to execute
+module "dcos-bootstrap" {
+  source  = "github.com/dcos/tf_dcos_core"
+  bootstrap_private_ip = "${openstack_compute_instance_v2.bootstrap.access_ip_v4}"
+  # Only allow upgrade and install as installation mode
+  dcos_install_mode = "${var.state == "upgrade" ? "upgrade" : "install"}"
+  dcos_version = "${var.dcos_version}"
+  role = "dcos-bootstrap"
+  dcos_bootstrap_port = "${var.custom_dcos_bootstrap_port}"
+  custom_dcos_download_path = "${var.custom_dcos_download_path}"
+  # TODO(bernadinm) Terraform Bug: 9488.  Templates will not accept list, but only strings.
+  # Workaround is to flatten the list as a string below. Fix when this is closed.
+  dcos_public_agent_list = "\n - ${join("\n - ", openstack_compute_instance_v2.public_agents.*.access_ip_v4)}"
+  dcos_audit_logging = "${var.dcos_audit_logging}"
+  dcos_auth_cookie_secure_flag = "${var.dcos_auth_cookie_secure_flag}"
+  dcos_aws_access_key_id = "${var.dcos_aws_access_key_id}"
+  dcos_aws_region = "${var.dcos_aws_region}"
+  dcos_aws_secret_access_key = "${var.dcos_aws_secret_access_key}"
+  dcos_aws_template_storage_access_key_id = "${var.dcos_aws_template_storage_access_key_id}"
+  dcos_aws_template_storage_bucket = "${var.dcos_aws_template_storage_bucket}"
+  dcos_aws_template_storage_bucket_path = "${var.dcos_aws_template_storage_bucket_path}"
+  dcos_aws_template_storage_region_name = "${var.dcos_aws_template_storage_region_name}"
+  dcos_aws_template_storage_secret_access_key = "${var.dcos_aws_template_storage_secret_access_key}"
+  dcos_aws_template_upload = "${var.dcos_aws_template_upload}"
+  dcos_bouncer_expiration_auth_token_days = "${var.dcos_bouncer_expiration_auth_token_days}"
+  dcos_check_time = "${var.dcos_check_time}"
+  dcos_cluster_docker_credentials = "${var.dcos_cluster_docker_credentials}"
+  dcos_cluster_docker_credentials_dcos_owned = "${var.dcos_cluster_docker_credentials_dcos_owned}"
+  dcos_cluster_docker_credentials_enabled = "${var.dcos_cluster_docker_credentials_enabled}"
+  dcos_cluster_docker_credentials_write_to_etc = "${var.dcos_cluster_docker_credentials_write_to_etc}"
+  dcos_cluster_name  = "${coalesce(var.dcos_cluster_name, data.template_file.cluster-name.rendered)}"
+  dcos_customer_key = "${var.dcos_customer_key}"
+  dcos_dns_search = "${var.dcos_dns_search}"
+  dcos_docker_remove_delay = "${var.dcos_docker_remove_delay}"
+  # TODO: Revisit, implement exhibitor
+  dcos_exhibitor_address = ""
+  dcos_exhibitor_explicit_keys = "${var.dcos_exhibitor_explicit_keys}"
+  dcos_exhibitor_storage_backend = "${var.dcos_exhibitor_storage_backend}"
+  dcos_exhibitor_zk_hosts = "${var.dcos_exhibitor_zk_hosts}"
+  dcos_exhibitor_zk_path = "${var.dcos_exhibitor_zk_path}"
+  dcos_gc_delay = "${var.dcos_gc_delay}"
+  dcos_http_proxy = "${var.dcos_http_proxy}"
+  dcos_https_proxy = "${var.dcos_https_proxy}"
+  dcos_log_directory = "${var.dcos_log_directory}"
+  # TODO: Revisit, implement external load balancer "dcos_master_external_loadbalancer"
+  dcos_master_discovery = "${var.dcos_master_discovery}"
+  dcos_master_dns_bindall = "${var.dcos_master_dns_bindall}"
+  # TODO(bernadinm) Terraform Bug: 9488.  Templates will not accept list, but only strings.
+  # Workaround is to flatten the list as a string below. Fix when this is closed.
+  dcos_master_list = "\n - ${join("\n - ", openstack_compute_instance_v2.masters.*.access_ip_v4)}"
+  dcos_no_proxy = "${var.dcos_no_proxy}"
+  dcos_num_masters = "${var.num_of_masters}"
+  dcos_oauth_enabled = "${var.dcos_oauth_enabled}"
+  dcos_overlay_config_attempts = "${var.dcos_overlay_config_attempts}"
+  dcos_overlay_enable = "${var.dcos_overlay_enable}"
+  dcos_overlay_mtu = "${var.dcos_overlay_mtu}"
+  dcos_overlay_network = "${var.dcos_overlay_network}"
+  dcos_process_timeout = "${var.dcos_process_timeout}"
+  dcos_previous_version = "${var.dcos_previous_version}"
+  dcos_agent_list = "\n - ${join("\n - ", openstack_compute_instance_v2.private_agents.*.access_ip_v4)}"
+  # TODO(bernadinm) Terraform Bug: 9488.  Templates will not accept list, but only strings.
+  # Workaround is to flatten the list as a string below. Fix when this is closed.
+  dcos_resolvers  = "\n - ${join("\n - ", var.dcos_resolvers)}"
+  dcos_rexray_config_filename = "${var.dcos_rexray_config_filename}"
+  dcos_rexray_config_method = "${var.dcos_rexray_config_method}"
+  dcos_s3_bucket = "${var.dcos_s3_bucket}"
+  dcos_s3_prefix = "${var.dcos_s3_prefix}"
+  dcos_security  = "${var.dcos_security}"
+  dcos_superuser_password_hash = "${var.dcos_superuser_password_hash}"
+  dcos_superuser_username = "${var.dcos_superuser_username}"
+  dcos_telemetry_enabled = "${var.dcos_telemetry_enabled}"
+  dcos_use_proxy = "${var.dcos_use_proxy}"
+  dcos_zk_agent_credentials = "${var.dcos_zk_agent_credentials}"
+  dcos_zk_master_credentials = "${var.dcos_zk_master_credentials}"
+  dcos_zk_super_credentials = "${var.dcos_zk_super_credentials}"
+  dcos_cluster_docker_registry_url = "${var.dcos_cluster_docker_registry_url}"
+  dcos_rexray_config = "${var.dcos_rexray_config}"
+  dcos_ip_detect_public_contents = "${var.dcos_ip_detect_public_contents}"
+  dcos_enable_docker_gc = "${var.dcos_enable_docker_gc}"
+  dcos_staged_package_storage_uri = "${var.dcos_staged_package_storage_uri}"
+  dcos_package_storage_uri = "${var.dcos_package_storage_uri}"
+  dcos_config = "${var.dcos_config}"
+}
+
+resource "null_resource" "bootstrap" {
+  # If state is set to none do not install DC/OS
+  count = "${var.state == "none" ? 0 : 1}"
+  # Changes to any instance of the cluster requires re-provisioning
+  triggers {
+    cluster_instance_ids = "${openstack_compute_instance_v2.bootstrap.id}"
+    dcos_version = "${var.dcos_version}"
+    dcos_security = "${var.dcos_security}"
+    num_of_masters = "${var.num_of_masters}"
+    dcos_bootstrap_port = "${var.custom_dcos_bootstrap_port}"
+    dcos_audit_logging = "${var.dcos_audit_logging}"
+    dcos_auth_cookie_secure_flag = "${var.dcos_auth_cookie_secure_flag}"
+    dcos_aws_access_key_id = "${var.dcos_aws_access_key_id}"
+    dcos_aws_region = "${var.dcos_aws_region}"
+    dcos_aws_secret_access_key = "${var.dcos_aws_secret_access_key}"
+    dcos_aws_template_storage_access_key_id = "${var.dcos_aws_template_storage_access_key_id}"
+    dcos_aws_template_storage_bucket = "${var.dcos_aws_template_storage_bucket}"
+    dcos_aws_template_storage_bucket_path = "${var.dcos_aws_template_storage_bucket_path}"
+    dcos_aws_template_storage_region_name = "${var.dcos_aws_template_storage_region_name}"
+    dcos_aws_template_storage_secret_access_key = "${var.dcos_aws_template_storage_secret_access_key}"
+    dcos_aws_template_upload = "${var.dcos_aws_template_upload}"
+    dcos_bouncer_expiration_auth_token_days = "${var.dcos_bouncer_expiration_auth_token_days}"
+    dcos_check_time = "${var.dcos_check_time}"
+    dcos_cluster_docker_credentials = "${var.dcos_cluster_docker_credentials}"
+    dcos_cluster_docker_credentials_dcos_owned = "${var.dcos_cluster_docker_credentials_dcos_owned}"
+    dcos_cluster_docker_credentials_enabled = "${var.dcos_cluster_docker_credentials_enabled}"
+    dcos_cluster_docker_credentials_write_to_etc = "${var.dcos_cluster_docker_credentials_write_to_etc}"
+    dcos_cluster_name  = "${coalesce(var.dcos_cluster_name, data.template_file.cluster-name.rendered)}"
+    dcos_customer_key = "${var.dcos_customer_key}"
+    dcos_dns_search = "${var.dcos_dns_search}"
+    dcos_docker_remove_delay = "${var.dcos_docker_remove_delay}"
+    # TODO: Revisit, implement exhibitor
+    dcos_exhibitor_address = ""
+    dcos_exhibitor_explicit_keys = "${var.dcos_exhibitor_explicit_keys}"
+    dcos_exhibitor_storage_backend = "${var.dcos_exhibitor_storage_backend}"
+    dcos_exhibitor_zk_hosts = "${var.dcos_exhibitor_zk_hosts}"
+    dcos_exhibitor_zk_path = "${var.dcos_exhibitor_zk_path}"
+    dcos_gc_delay = "${var.dcos_gc_delay}"
+    dcos_http_proxy = "${var.dcos_http_proxy}"
+    dcos_https_proxy = "${var.dcos_https_proxy}"
+    dcos_log_directory = "${var.dcos_log_directory}"
+    # TODO: Revisit, implement external load balancer "dcos_master_external_loadbalancer"
+    dcos_master_discovery = "${var.dcos_master_discovery}"
+    dcos_master_dns_bindall = "${var.dcos_master_dns_bindall}"
+    # TODO(bernadinm) Terraform Bug: 9488.  Templates will not accept list, but only strings.
+    # Workaround is to flatten the list as a string below. Fix when this is closed.
+    dcos_no_proxy = "${var.dcos_no_proxy}"
+    dcos_num_masters = "${var.num_of_masters}"
+    dcos_oauth_enabled = "${var.dcos_oauth_enabled}"
+    dcos_overlay_config_attempts = "${var.dcos_overlay_config_attempts}"
+    dcos_overlay_enable = "${var.dcos_overlay_enable}"
+    dcos_overlay_mtu = "${var.dcos_overlay_mtu}"
+    dcos_overlay_network = "${var.dcos_overlay_network}"
+    dcos_process_timeout = "${var.dcos_process_timeout}"
+    # TODO(bernadinm) Terraform Bug: 9488.  Templates will not accept list, but only strings.
+    # Workaround is to flatten the list as a string below. Fix when this is closed.
+    dcos_previous_version = "${var.dcos_previous_version}"
+    dcos_resolvers  = "\n - ${join("\n - ", var.dcos_resolvers)}"
+    dcos_rexray_config_filename = "${var.dcos_rexray_config_filename}"
+    dcos_rexray_config_method = "${var.dcos_rexray_config_method}"
+    dcos_s3_bucket = "${var.dcos_s3_bucket}"
+    dcos_s3_prefix = "${var.dcos_s3_prefix}"
+    dcos_security  = "${var.dcos_security}"
+    dcos_superuser_password_hash = "${var.dcos_superuser_password_hash}"
+    dcos_superuser_username = "${var.dcos_superuser_username}"
+    dcos_telemetry_enabled = "${var.dcos_telemetry_enabled}"
+    dcos_use_proxy = "${var.dcos_use_proxy}"
+    dcos_zk_agent_credentials = "${var.dcos_zk_agent_credentials}"
+    dcos_zk_master_credentials = "${var.dcos_zk_master_credentials}"
+    dcos_zk_super_credentials = "${var.dcos_zk_super_credentials}"
+    dcos_cluster_docker_registry_url = "${var.dcos_cluster_docker_registry_url}"
+    dcos_rexray_config = "${var.dcos_rexray_config}"
+    dcos_ip_detect_public_contents = "${var.dcos_ip_detect_public_contents}"
+    dcos_enable_docker_gc = "${var.dcos_enable_docker_gc}"
+    dcos_staged_package_storage_uri = "${var.dcos_staged_package_storage_uri}"
+    dcos_package_storage_uri = "${var.dcos_package_storage_uri}"
+    dcos_config = "${var.dcos_config}"
+  }
+
+  # Bootstrap script can run on any instance of the cluster
+  # So we just choose the first in this case
+  connection {
+    host = "${openstack_networking_floatingip_v2.bootstrap.address}"
+    user = "${coalesce(var.admin_username, module.openstack-tested-oses.user)}"
+    private_key = "${local.private_key}"
+    agent = "${local.agent}"
+  }
+
+  # DCOS ip detect script
+  provisioner "file" {
+   source = "${var.ip-detect}"
+   destination = "/tmp/ip-detect"
+   }
+
+  # Generate and upload bootstrap script to node
+  provisioner "file" {
+    content     = "${module.dcos-bootstrap.script}"
+    destination = "run.sh"
+  }
+
+  # Install Bootstrap Script
+  provisioner "remote-exec" {
+    inline = [
+      "sudo chmod +x run.sh",
+      "sudo ./run.sh",
+    ]
+  }
+
+  lifecycle {
+    ignore_changes = ["data.template_file.cluster-name.rendered"]
+  }
+}
+
+
+output "Bootstrap Host Public IP" {
+  value = "${openstack_networking_floatingip_v2.bootstrap.address}"
+}
diff --git a/openstack/main.tf b/openstack/main.tf
new file mode 100644
index 0000000..f26abb0
--- /dev/null
+++ b/openstack/main.tf
@@ -0,0 +1,100 @@
+# Runs a local script to return the current user in bash
+data "external" "whoami" {
+  program = ["scripts/local/whoami.sh"]
+}
+
+locals {
+  private_key = "${file(var.ssh_private_key_filename)}"
+  agent = "${var.ssh_private_key_filename == "/dev/null" ? true : false}"
+}
+
+# Privdes a unique ID thoughout the livespan of the cluster
+resource "random_id" "cluster" {
+  keepers = {
+    # Generate a new id each time we switch to a new AMI id
+    id = "${coalesce(var.owner, data.external.whoami.result["owner"])}"
+  }
+
+  byte_length = 8
+}
+
+# Allow overrides of the owner variable or default to whoami.sh
+data "template_file" "cluster-name" {
+ template = "$${username}-tf$${uuid}"
+
+  vars {
+    uuid     = "${substr(md5(random_id.cluster.id),0,4)}"
+    username = "${coalesce(var.owner, data.external.whoami.result["owner"])}"
+  }
+}
+
+
+# Grab the image to use, just grab the latest
+data "openstack_images_image_v2" "selected_image" {
+  name          = "${var.os_image_name}"
+  most_recent   = true
+}
+
+
+provider "openstack" {
+  # Expects the connection information to be provided via environment variables
+  # See README for reference on OpenStack RC file
+}
+
+
+# Setup the networking: single virtual network with two subnets that go through the same router
+# REVIEW: Do I need to setup security groups?
+resource "openstack_networking_network_v2" "vnet" {
+  name = "vnet-${data.template_file.cluster-name.rendered}"
+}
+
+resource "openstack_networking_subnet_v2" "public" {
+  name              = "public"
+  network_id        = "${openstack_networking_network_v2.vnet.id}"
+  cidr              = "10.100.1.0/24"
+  ip_version        = 4
+  dns_nameservers   = "${var.dcos_resolvers}"
+}
+
+resource "openstack_networking_subnet_v2" "private" {
+  name              = "private"
+  network_id        = "${openstack_networking_network_v2.vnet.id}"
+  cidr              = "10.100.2.0/24"
+  ip_version        = 4
+  dns_nameservers   = "${var.dcos_resolvers}"
+}
+
+resource "openstack_networking_router_v2" "router" {
+  name                  = "router-${data.template_file.cluster-name.rendered}"
+  external_network_id   = "${var.os_external_network_id}"
+}
+
+# REVIEW: Nameservers are sourced from the same place for public and private. May want to separate.
+resource "openstack_networking_router_interface_v2" "router_interface_public" {
+  router_id = "${openstack_networking_router_v2.router.id}"
+  subnet_id = "${openstack_networking_subnet_v2.public.id}"
+}
+resource "openstack_networking_router_interface_v2" "router_interface_private" {
+  router_id = "${openstack_networking_router_v2.router.id}"
+  subnet_id = "${openstack_networking_subnet_v2.private.id}"
+}
+
+
+resource "openstack_compute_keypair_v2" "keypair" {
+  name          = "${data.template_file.cluster-name.rendered}-keypair"
+  public_key    = "${var.ssh_pub_key}"
+}
+
+
+module "openstack-tested-oses" {
+  source        = "./modules/dcos-tested-openstack-oses"
+  provider      = "openstack"
+  os            = "${var.os}"
+  region        = "${var.region}"
+  ntp_servers   = "${var.ntp_servers}"
+}
+
+
+output "ssh_user" {
+ value = "${module.openstack-tested-oses.user}"
+}
diff --git a/openstack/master.tf b/openstack/master.tf
new file mode 100644
index 0000000..2b4851e
--- /dev/null
+++ b/openstack/master.tf
@@ -0,0 +1,131 @@
+# Master Node
+
+
+# REVIEW: Giving master nodes public floating ips to access web UI
+resource "openstack_networking_floatingip_v2" "masters" {
+  count = "${var.num_of_masters}"
+  pool  = "${var.os_floating_ip_pool}"
+}
+
+resource "openstack_compute_floatingip_associate_v2" "masters" {
+  count         = "${var.num_of_masters}"
+  floating_ip   = "${openstack_networking_floatingip_v2.masters.*.address[count.index]}"
+  instance_id   = "${openstack_compute_instance_v2.masters.*.id[count.index]}"
+}
+
+
+data "openstack_compute_flavor_v2" "master" {
+  name = "${var.master_instance_flavor}"
+}
+
+
+resource "openstack_networking_secgroup_v2" "master" {
+  name = "${data.template_file.cluster-name.rendered}-master"
+}
+
+resource "openstack_networking_secgroup_rule_v2" "ingress_master" {
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  security_group_id = "${openstack_networking_secgroup_v2.master.id}"
+}
+
+
+resource "openstack_networking_port_v2" "masters" {
+  count                 = "${var.num_of_masters}"
+  name                  = "${data.template_file.cluster-name.rendered}-master-${count.index}"
+  network_id            = "${openstack_networking_network_v2.vnet.id}"
+  admin_state_up        = "true"
+  security_group_ids    = ["${openstack_networking_secgroup_v2.master.id}"]
+
+  fixed_ip {
+    subnet_id           = "${openstack_networking_subnet_v2.public.id}"
+  }
+}
+
+
+resource "openstack_compute_instance_v2" "masters" {
+  count             = "${var.num_of_masters}"
+  name              = "${data.template_file.cluster-name.rendered}-master-${count.index}"
+  image_id          = "${data.openstack_images_image_v2.selected_image.id}"
+  flavor_id         = "${data.openstack_compute_flavor_v2.master.id}"
+  key_pair          = "${openstack_compute_keypair_v2.keypair.name}"
+  user_data         = "${module.openstack-tested-oses.os_user_data}"
+
+  metadata {
+    Name       = "${coalesce(var.owner, data.external.whoami.result["owner"])}"
+    expiration = "${var.expiration}"
+  }
+
+  network {
+    port = "${openstack_networking_port_v2.masters.*.id[count.index]}"
+  }
+
+}
+
+
+# Create DCOS Mesos Master Scripts to execute
+module "dcos-mesos-master" {
+  source               = "github.com/dcos/tf_dcos_core"
+  bootstrap_private_ip = "${openstack_compute_instance_v2.bootstrap.access_ip_v4}"
+  dcos_bootstrap_port  = "${var.custom_dcos_bootstrap_port}"
+  # Only allow upgrade and install as installation mode
+  dcos_install_mode = "${var.state == "upgrade" ? "upgrade" : "install"}"
+  dcos_version         = "${var.dcos_version}"
+  role                 = "dcos-mesos-master"
+}
+
+resource "null_resource" "master" {
+  # If state is set to none do not install DC/OS
+  count = "${var.state == "none" ? 0 : var.num_of_masters}"
+  # Changes to any instance of the cluster requires re-provisioning
+  triggers {
+    cluster_instance_ids = "${null_resource.bootstrap.id}"
+    current_virtual_machine_id = "${openstack_compute_instance_v2.masters.*.id[count.index]}"
+  }
+  # Bootstrap script can run on any instance of the cluster
+  # So we just choose the first in this case
+  connection {
+    bastion_host = "${openstack_networking_floatingip_v2.bootstrap.address}"
+    host = "${element(openstack_compute_instance_v2.masters.*.access_ip_v4, count.index)}"
+    user = "${coalesce(var.admin_username, module.openstack-tested-oses.user)}"
+    private_key = "${local.private_key}"
+    agent = "${local.agent}"
+  }
+
+  # Generate and upload Master script to node
+  provisioner "file" {
+    content     = "${module.dcos-mesos-master.script}"
+    destination = "run.sh"
+  }
+
+  # Wait for bootstrapnode to be ready
+  provisioner "remote-exec" {
+    inline = [
+     "until $(curl --output /dev/null --silent --head --fail http://${openstack_compute_instance_v2.bootstrap.access_ip_v4}:${var.custom_dcos_bootstrap_port}/dcos_install.sh); do printf 'waiting for bootstrap node to serve...'; sleep 20; done"
+    ]
+  }
+
+  # Install Master Script
+  provisioner "remote-exec" {
+    inline = [
+      "sudo chmod +x run.sh",
+      "sudo ./run.sh",
+    ]
+  }
+
+  # Watch Master Nodes Start
+  provisioner "remote-exec" {
+    inline = [
+      "until $(curl --output /dev/null --silent --head --fail http://${element(openstack_compute_instance_v2.masters.*.access_ip_v4, count.index)}/); do printf 'loading DC/OS...'; sleep 10; done"
+    ]
+  }
+}
+
+
+output "Master Public IPs" {
+  value = ["${openstack_compute_instance_v2.masters.*.access_ip_v4}"]
+}
+
+output "Master Floating IPs" {
+  value = ["${openstack_networking_floatingip_v2.masters.*.address}"]
+}
diff --git a/openstack/modules/dcos-tested-openstack-oses/input_test_profile b/openstack/modules/dcos-tested-openstack-oses/input_test_profile
new file mode 100644
index 0000000..7bd76d7
--- /dev/null
+++ b/openstack/modules/dcos-tested-openstack-oses/input_test_profile
@@ -0,0 +1,20 @@
+# Test Variables to Ensure Working Module
+# Run with `terraform apply -var-file test_input_profile`
+#
+# Desired Output : 
+# 
+# Apply complete! Resources: 0 added, 0 changed, 0 destroyed.
+#
+# Outputs:
+#
+# azure_offer = RHEL
+# azure_publisher = RedHat
+# azure_sku = 7.3
+# azure_version = 7.3.2017053118
+# ------------------------------
+provider = "azure"
+os = "rhel_7.3"
+#os = "centos_7.3"
+#os = "coreos_835.13.0"
+#os = "coreos_1235.9.0"
+region = "westus"
diff --git a/openstack/modules/dcos-tested-openstack-oses/main_output.tf b/openstack/modules/dcos-tested-openstack-oses/main_output.tf
new file mode 100644
index 0000000..9197589
--- /dev/null
+++ b/openstack/modules/dcos-tested-openstack-oses/main_output.tf
@@ -0,0 +1,13 @@
+# Main Output
+
+output "os_setup" {
+  value = "${data.template_file.os_setup.rendered}"
+}
+
+output "os_user_data" {
+  value = "${data.template_file.os_user_data.rendered}"
+}
+
+output "user" {
+  value = "${data.template_file.traditional_os_user.rendered}"
+}
diff --git a/openstack/modules/dcos-tested-openstack-oses/main_template_file.tf b/openstack/modules/dcos-tested-openstack-oses/main_template_file.tf
new file mode 100644
index 0000000..480b09b
--- /dev/null
+++ b/openstack/modules/dcos-tested-openstack-oses/main_template_file.tf
@@ -0,0 +1,23 @@
+# Cloud Image Instruction
+
+data "template_file" "os_setup" {
+  template = "${file("${path.module}/platform/cloud/${var.provider}/${var.os}/setup.sh")}"
+}
+
+data "template_file" "os_user_data" {
+  template = "${file("${path.module}/platform/cloud/${var.provider}/${var.os}/user-data.yaml")}"
+
+  vars {
+    # NOTE: indent doesn't apply to the first line for some reason.
+    os_setup_script = "    ${indent(4, data.template_file.os_setup.rendered)}"
+    ntp_servers     = "${join(" ", var.ntp_servers)}"
+  }
+}
+
+data "template_file" "traditional_os_user" {
+  template = "$${user_result}"
+
+  vars {
+    user_result = "${lookup(var.traditional_default_os_user, element(split("_",var.os),0))}"
+  }
+}
diff --git a/openstack/modules/dcos-tested-openstack-oses/main_variables.tf b/openstack/modules/dcos-tested-openstack-oses/main_variables.tf
new file mode 100644
index 0000000..d8d840d
--- /dev/null
+++ b/openstack/modules/dcos-tested-openstack-oses/main_variables.tf
@@ -0,0 +1,20 @@
+variable "provider" {
+ default = "openstack"
+}
+
+variable "os" {}
+variable "region" {}
+
+variable "traditional_default_os_user" {
+ type = "map"
+ default = {
+ coreos = "core"
+ centos = "centos"
+ ubuntu = "ubuntu"
+ }
+}
+
+variable "ntp_servers" {
+  type = "list"
+  description = "Set custom NTP servers. DC/OS poststart checks desires time to by synchronized."
+}
diff --git a/openstack/modules/dcos-tested-openstack-oses/platform/cloud/openstack/centos_7.2/setup.sh b/openstack/modules/dcos-tested-openstack-oses/platform/cloud/openstack/centos_7.2/setup.sh
new file mode 100644
index 0000000..7db2622
--- /dev/null
+++ b/openstack/modules/dcos-tested-openstack-oses/platform/cloud/openstack/centos_7.2/setup.sh
@@ -0,0 +1,35 @@
+sudo setenforce 0 && \
+sudo sed -i --follow-symlinks 's/^SELINUX=.*/SELINUX=disabled/g' /etc/sysconfig/selinux
+sudo tee /etc/yum.repos.d/docker.repo <<-'EOF'
+[dockerrepo]
+name=Docker Repository
+baseurl=https://yum.dockerproject.org/repo/main/centos/7
+enabled=1
+gpgcheck=1
+gpgkey=https://yum.dockerproject.org/gpg
+EOF
+# sudo yum -y update --exclude="docker-engine*"
+sudo mkdir -p /etc/systemd/system/docker.service.d
+sudo tee /etc/systemd/system/docker.service.d/override.conf <<- EOF
+[Service]
+Restart=always
+StartLimitInterval=0
+RestartSec=15
+ExecStartPre=-/sbin/ip link del docker0
+ExecStart=
+ExecStart=/usr/bin/docker daemon --storage-driver=overlay -H fd://
+EOF
+sudo yum install -y docker-engine-1.11.2
+sudo systemctl start docker
+sudo systemctl enable docker
+sudo yum install -y wget
+sudo yum install -y git
+sudo yum install -y unzip
+sudo yum install -y curl
+sudo yum install -y xz
+sudo yum install -y ipset
+sudo yum install -y ntp
+sudo systemctl enable ntpd
+sudo systemctl start ntpd
+sudo getent group nogroup || sudo groupadd nogroup
+sudo touch /opt/dcos-prereqs.installed
diff --git a/openstack/modules/dcos-tested-openstack-oses/platform/cloud/openstack/centos_7.3/setup.sh b/openstack/modules/dcos-tested-openstack-oses/platform/cloud/openstack/centos_7.3/setup.sh
new file mode 100644
index 0000000..2cb8290
--- /dev/null
+++ b/openstack/modules/dcos-tested-openstack-oses/platform/cloud/openstack/centos_7.3/setup.sh
@@ -0,0 +1,34 @@
+sudo setenforce 0 && \
+sudo sed -i --follow-symlinks 's/^SELINUX=.*/SELINUX=disabled/g' /etc/sysconfig/selinux
+sudo tee /etc/yum.repos.d/docker.repo <<-'EOF'
+[dockerrepo]
+name=Docker Repository
+baseurl=https://yum.dockerproject.org/repo/main/centos/7
+enabled=1
+gpgcheck=1
+gpgkey=https://yum.dockerproject.org/gpg
+EOF
+# sudo yum -y update --exclude="docker-engine*"
+sudo mkdir -p /etc/systemd/system/docker.service.d
+sudo tee /etc/systemd/system/docker.service.d/override.conf <<- EOF
+[Service]
+ExecStart=
+ExecStart=/usr/bin/docker daemon --storage-driver=overlay
+EOF
+sudo yum install -y docker-engine-1.13.1
+sudo systemctl start docker
+sudo systemctl enable docker
+sudo systemctl stop dnsmasq.service
+sudo systemctl disable dnsmasq.service
+sudo yum install -y wget
+sudo yum install -y git
+sudo yum install -y unzip
+sudo yum install -y curl
+sudo yum install -y xz
+sudo yum install -y ipset
+sudo yum install -y ntp
+sudo systemctl enable ntpd
+sudo systemctl start ntpd
+sudo getent group nogroup || sudo groupadd nogroup
+sudo getent group docker || sudo groupadd docker
+sudo touch /opt/dcos-prereqs.installed
diff --git a/openstack/modules/dcos-tested-openstack-oses/platform/cloud/openstack/coreos/setup.sh b/openstack/modules/dcos-tested-openstack-oses/platform/cloud/openstack/coreos/setup.sh
new file mode 100644
index 0000000..40fb240
--- /dev/null
+++ b/openstack/modules/dcos-tested-openstack-oses/platform/cloud/openstack/coreos/setup.sh
@@ -0,0 +1,10 @@
+#!/bin/sh
+
+sudo systemctl disable locksmithd
+sudo systemctl stop locksmithd
+sudo systemctl restart docker # Restarting docker to ensure its ready. Seems like its not during first usage.
+
+# Restart timesync service to ensure any configuration
+# changes (i.e. ntp server change) gets picked up. The
+# impact is the dcos-checks-poststart unit
+sudo systemctl restart systemd-timesyncd
diff --git a/openstack/modules/dcos-tested-openstack-oses/platform/cloud/openstack/coreos/user-data.yaml b/openstack/modules/dcos-tested-openstack-oses/platform/cloud/openstack/coreos/user-data.yaml
new file mode 100644
index 0000000..7351768
--- /dev/null
+++ b/openstack/modules/dcos-tested-openstack-oses/platform/cloud/openstack/coreos/user-data.yaml
@@ -0,0 +1,31 @@
+#cloud-config
+
+# This is a generic cloud config to be used for all the nodes
+# for the cloud init process. Top level terraforming should
+# inject a setup script.
+"write_files":
+- "path": "/opt/dcos-install/os-setup.sh"
+  "content": |-
+${os_setup_script}
+  "owner": "root"
+  "permissions": "0644"
+- "path": "/etc/systemd/timesyncd.conf"
+  "content": |-
+    [Time]
+    NTP=${ntp_servers}
+"coreos":
+  "units":
+  - "command": |-
+      start
+    "content": |
+      [Unit]
+      Description=Boot node dcos install for pull method
+      Requires=docker.service
+      [Service]
+      Type=oneshot
+      StandardOutput=journal+console
+      StandardError=journal+console
+      RemainAfterExit=yes
+      ExecStart=/bin/bash "/opt/dcos-install/os-setup.sh"
+    "name": |-
+      dcos-install.service
diff --git a/openstack/private-agent.tf b/openstack/private-agent.tf
new file mode 100644
index 0000000..020acb8
--- /dev/null
+++ b/openstack/private-agent.tf
@@ -0,0 +1,106 @@
+# Private Agents
+
+data "openstack_compute_flavor_v2" "private_agent" {
+  name = "${var.private_agent_instance_flavor}"
+}
+
+
+resource "openstack_networking_secgroup_v2" "private_agent" {
+  name = "${data.template_file.cluster-name.rendered}-private-agent"
+}
+
+resource "openstack_networking_secgroup_rule_v2" "ingress_private_agent" {
+  direction = "ingress"
+  ethertype = "IPv4"
+  security_group_id = "${openstack_networking_secgroup_v2.private_agent.id}"
+}
+
+
+resource "openstack_networking_port_v2" "private_agents" {
+  count                 = "${var.num_of_private_agents}"
+  name                  = "${data.template_file.cluster-name.rendered}-private-agent-${count.index}"
+  network_id            = "${openstack_networking_network_v2.vnet.id}"
+  admin_state_up        = "true"
+  security_group_ids    = ["${openstack_networking_secgroup_v2.private_agent.id}"]
+
+  fixed_ip {
+    # REVIEW: Should this be the public subnet or private?
+    subnet_id           = "${openstack_networking_subnet_v2.public.id}"
+  }
+}
+
+
+resource "openstack_compute_instance_v2" "private_agents" {
+  count             = "${var.num_of_private_agents}"
+  name              = "${data.template_file.cluster-name.rendered}-private-agents-${count.index}"
+  image_id          = "${data.openstack_images_image_v2.selected_image.id}"
+  flavor_id         = "${data.openstack_compute_flavor_v2.private_agent.id}"
+  key_pair          = "${openstack_compute_keypair_v2.keypair.name}"
+  user_data         = "${module.openstack-tested-oses.os_user_data}"
+
+  metadata {
+    Name       = "${coalesce(var.owner, data.external.whoami.result["owner"])}"
+    expiration = "${var.expiration}"
+  }
+
+  network {
+    port = "${openstack_networking_port_v2.private_agents.*.id[count.index]}"
+  }
+
+}
+
+
+# Create DCOS Mesos Agent Scripts to execute
+module "dcos-mesos-agent" {
+  source               = "github.com/dcos/tf_dcos_core"
+  bootstrap_private_ip = "${openstack_compute_instance_v2.bootstrap.access_ip_v4}"
+  dcos_bootstrap_port  = "${var.custom_dcos_bootstrap_port}"
+  # Only allow upgrade and install as installation mode
+  dcos_install_mode = "${var.state == "upgrade" ? "upgrade" : "install"}"
+  dcos_version         = "${var.dcos_version}"
+  role                 = "dcos-mesos-agent"
+}
+
+resource "null_resource" "agent" {
+  # If state is set to none do not install DC/OS
+  count = "${var.state == "none" ? 0 : var.num_of_private_agents}"
+  # Changes to any instance of the cluster requires re-provisioning
+  triggers {
+    cluster_instance_ids = "${null_resource.bootstrap.id}"
+    current_virtual_machine_id = "${openstack_compute_instance_v2.private_agents.*.id[count.index]}"
+  }
+  # Bootstrap script can run on any instance of the cluster
+  # So we just choose the first in this case
+  connection {
+    bastion_host = "${openstack_networking_floatingip_v2.bootstrap.address}"
+    host = "${element(openstack_compute_instance_v2.private_agents.*.access_ip_v4, count.index)}"
+    user = "${coalesce(var.admin_username, module.openstack-tested-oses.user)}"
+    private_key = "${local.private_key}"
+    agent = "${local.agent}"
+  }
+
+  # Generate and upload Agent script to node
+  provisioner "file" {
+    content     = "${module.dcos-mesos-agent.script}"
+    destination = "run.sh"
+  }
+
+  # Wait for bootstrapnode to be ready
+  provisioner "remote-exec" {
+    inline = [
+     "until $(curl --output /dev/null --silent --head --fail http://${openstack_compute_instance_v2.bootstrap.access_ip_v4}:${var.custom_dcos_bootstrap_port}/dcos_install.sh); do printf 'waiting for bootstrap node to serve...'; sleep 20; done"
+    ]
+  }
+
+  # Install Agent Script
+  provisioner "remote-exec" {
+    inline = [
+      "sudo chmod +x run.sh",
+      "sudo ./run.sh",
+    ]
+  }
+}
+
+output "Private Agent Public IPs" {
+  value = ["${openstack_compute_instance_v2.private_agents.*.access_ip_v4}"]
+}
diff --git a/openstack/public-agent.tf b/openstack/public-agent.tf
new file mode 100644
index 0000000..cbc39e7
--- /dev/null
+++ b/openstack/public-agent.tf
@@ -0,0 +1,106 @@
+# Public Agent
+
+data "openstack_compute_flavor_v2" "public_agent" {
+  name = "${var.public_agent_instance_flavor}"
+}
+
+
+resource "openstack_networking_secgroup_v2" "public_agent" {
+  name = "${data.template_file.cluster-name.rendered}-public-agent"
+}
+
+resource "openstack_networking_secgroup_rule_v2" "ingress_public_agent" {
+  direction = "ingress"
+  ethertype = "IPv4"
+  security_group_id = "${openstack_networking_secgroup_v2.public_agent.id}"
+}
+
+
+resource "openstack_networking_port_v2" "public_agents" {
+  count                 = "${var.num_of_public_agents}"
+  name                  = "${data.template_file.cluster-name.rendered}-public-agent-${count.index}"
+  network_id            = "${openstack_networking_network_v2.vnet.id}"
+  admin_state_up        = "true"
+  security_group_ids    = ["${openstack_networking_secgroup_v2.public_agent.id}"]
+
+  fixed_ip {
+    # REVIEW: Should this be the public subnet or public?
+    subnet_id           = "${openstack_networking_subnet_v2.public.id}"
+  }
+}
+
+
+resource "openstack_compute_instance_v2" "public_agents" {
+  count             = "${var.num_of_public_agents}"
+  name              = "${data.template_file.cluster-name.rendered}-public-agents-${count.index}"
+  image_id          = "${data.openstack_images_image_v2.selected_image.id}"
+  flavor_id         = "${data.openstack_compute_flavor_v2.public_agent.id}"
+  key_pair          = "${openstack_compute_keypair_v2.keypair.name}"
+  user_data         = "${module.openstack-tested-oses.os_user_data}"
+
+  metadata {
+    Name       = "${coalesce(var.owner, data.external.whoami.result["owner"])}"
+    expiration = "${var.expiration}"
+  }
+
+  network {
+    port = "${openstack_networking_port_v2.public_agents.*.id[count.index]}"
+  }
+
+}
+
+
+# Create DCOS Mesos Agent Scripts to execute
+module "dcos-mesos-public-agent" {
+  source               = "github.com/dcos/tf_dcos_core"
+  bootstrap_private_ip = "${openstack_compute_instance_v2.bootstrap.access_ip_v4}"
+  dcos_bootstrap_port  = "${var.custom_dcos_bootstrap_port}"
+  # Only allow upgrade and install as installation mode
+  dcos_install_mode = "${var.state == "upgrade" ? "upgrade" : "install"}"
+  dcos_version         = "${var.dcos_version}"
+  role                 = "dcos-mesos-agent-public"
+}
+
+resource "null_resource" "public-agent" {
+  # If state is set to none do not install DC/OS
+  count = "${var.state == "none" ? 0 : var.num_of_public_agents}"
+  # Changes to any instance of the cluster requires re-provisioning
+  triggers {
+    cluster_instance_ids = "${null_resource.bootstrap.id}"
+    current_virtual_machine_id = "${openstack_compute_instance_v2.public_agents.*.id[count.index]}"
+  }
+  # Bootstrap script can run on any instance of the cluster
+  # So we just choose the first in this case
+  connection {
+    bastion_host = "${openstack_networking_floatingip_v2.bootstrap.address}"
+    host = "${element(openstack_compute_instance_v2.public_agents.*.access_ip_v4, count.index)}"
+    user = "${coalesce(var.admin_username, module.openstack-tested-oses.user)}"
+    private_key = "${local.private_key}"
+    agent = "${local.agent}"
+  }
+
+  # Generate and upload Agent script to node
+  provisioner "file" {
+    content     = "${module.dcos-mesos-public-agent.script}"
+    destination = "run.sh"
+  }
+
+  # Wait for bootstrapnode to be ready
+  provisioner "remote-exec" {
+    inline = [
+     "until $(curl --output /dev/null --silent --head --fail http://${openstack_compute_instance_v2.bootstrap.access_ip_v4}:${var.custom_dcos_bootstrap_port}/dcos_install.sh); do printf 'waiting for bootstrap node to serve...'; sleep 20; done"
+    ]
+  }
+
+  # Install Agent Script
+  provisioner "remote-exec" {
+    inline = [
+      "sudo chmod +x run.sh",
+      "sudo ./run.sh",
+    ]
+  }
+}
+
+output "public Agent Public IPs" {
+  value = ["${openstack_compute_instance_v2.public_agents.*.access_ip_v4}"]
+}
diff --git a/openstack/scripts/cloud/aws/ip-detect.aws.sh b/openstack/scripts/cloud/aws/ip-detect.aws.sh
new file mode 100644
index 0000000..e30811a
--- /dev/null
+++ b/openstack/scripts/cloud/aws/ip-detect.aws.sh
@@ -0,0 +1,5 @@
+#!/bin/sh
+# Example ip-detect script using an external authority
+# Uses the AWS Metadata Service to get the node's internal
+# ipv4 address
+curl -fsSL http://169.254.169.254/latest/meta-data/local-ipv4
diff --git a/openstack/scripts/cloud/aws/public-ip-detect.aws.sh b/openstack/scripts/cloud/aws/public-ip-detect.aws.sh
new file mode 100644
index 0000000..3cb97cd
--- /dev/null
+++ b/openstack/scripts/cloud/aws/public-ip-detect.aws.sh
@@ -0,0 +1,4 @@
+#!/bin/sh
+set -o nounset -o errexit
+
+curl -fsSL http://169.254.169.254/latest/meta-data/public-ipv4
diff --git a/openstack/scripts/cloud/azure/ip-detect.azure.sh b/openstack/scripts/cloud/azure/ip-detect.azure.sh
new file mode 100644
index 0000000..e394d72
--- /dev/null
+++ b/openstack/scripts/cloud/azure/ip-detect.azure.sh
@@ -0,0 +1,5 @@
+#!/bin/sh
+# Example ip-detect script using an external authority
+# Uses the Azure Metadata Service to get the node's internal
+# ipv4 address
+curl -H Metadata:true -fsSL "http://169.254.169.254/metadata/instance/network/interface/0/ipv4/ipAddress/0/privateIpAddress?api-version=2017-04-02&format=text"
diff --git a/openstack/scripts/cloud/azure/public-ip-detect.azure.sh b/openstack/scripts/cloud/azure/public-ip-detect.azure.sh
new file mode 100644
index 0000000..6833a96
--- /dev/null
+++ b/openstack/scripts/cloud/azure/public-ip-detect.azure.sh
@@ -0,0 +1,4 @@
+#!/bin/sh
+set -o nounset -o errexit
+
+curl -H Metadata:true -fsSL "http://169.254.169.254/metadata/instance/network/interface/0/ipv4/ipAddress/0/publicIpAddress?api-version=2017-04-02&format=text"
diff --git a/openstack/scripts/cloud/openstack/ip-detect.openstack.sh b/openstack/scripts/cloud/openstack/ip-detect.openstack.sh
new file mode 100644
index 0000000..ccc3db4
--- /dev/null
+++ b/openstack/scripts/cloud/openstack/ip-detect.openstack.sh
@@ -0,0 +1,2 @@
+#!/bin/sh
+curl -fsSL http://169.254.169.254/latest/meta-data/local-ipv4
diff --git a/openstack/scripts/local/whoami.sh b/openstack/scripts/local/whoami.sh
new file mode 100755
index 0000000..ae48071
--- /dev/null
+++ b/openstack/scripts/local/whoami.sh
@@ -0,0 +1,3 @@
+#!/bin/bash
+
+echo {\"owner\":\"$(whoami)\"}
diff --git a/openstack/scripts/os/centos/centos-init.aws.sh b/openstack/scripts/os/centos/centos-init.aws.sh
new file mode 100644
index 0000000..7db2622
--- /dev/null
+++ b/openstack/scripts/os/centos/centos-init.aws.sh
@@ -0,0 +1,35 @@
+sudo setenforce 0 && \
+sudo sed -i --follow-symlinks 's/^SELINUX=.*/SELINUX=disabled/g' /etc/sysconfig/selinux
+sudo tee /etc/yum.repos.d/docker.repo <<-'EOF'
+[dockerrepo]
+name=Docker Repository
+baseurl=https://yum.dockerproject.org/repo/main/centos/7
+enabled=1
+gpgcheck=1
+gpgkey=https://yum.dockerproject.org/gpg
+EOF
+# sudo yum -y update --exclude="docker-engine*"
+sudo mkdir -p /etc/systemd/system/docker.service.d
+sudo tee /etc/systemd/system/docker.service.d/override.conf <<- EOF
+[Service]
+Restart=always
+StartLimitInterval=0
+RestartSec=15
+ExecStartPre=-/sbin/ip link del docker0
+ExecStart=
+ExecStart=/usr/bin/docker daemon --storage-driver=overlay -H fd://
+EOF
+sudo yum install -y docker-engine-1.11.2
+sudo systemctl start docker
+sudo systemctl enable docker
+sudo yum install -y wget
+sudo yum install -y git
+sudo yum install -y unzip
+sudo yum install -y curl
+sudo yum install -y xz
+sudo yum install -y ipset
+sudo yum install -y ntp
+sudo systemctl enable ntpd
+sudo systemctl start ntpd
+sudo getent group nogroup || sudo groupadd nogroup
+sudo touch /opt/dcos-prereqs.installed
diff --git a/openstack/scripts/os/coreos/coreos-init.aws.sh b/openstack/scripts/os/coreos/coreos-init.aws.sh
new file mode 100644
index 0000000..bc327ed
--- /dev/null
+++ b/openstack/scripts/os/coreos/coreos-init.aws.sh
@@ -0,0 +1,4 @@
+#!/bin/sh
+
+sudo systemctl disable locksmithd
+sudo systemctl stop locksmithd
diff --git a/openstack/variables.tf b/openstack/variables.tf
new file mode 100644
index 0000000..02bb58d
--- /dev/null
+++ b/openstack/variables.tf
@@ -0,0 +1,456 @@
+variable "ssh_pub_key" {
+  description = "The Public SSH Key associated with your instances for login. Copy your own key from your machine when deploying to log into your instance."
+  default = "ssh-rsa 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 default@mesosphere.com"
+}
+
+variable "ssh_private_key_filename" {
+ # cannot leave this empty as the file() interpolation will fail later on for the private_key local variable
+ # https://github.com/hashicorp/terraform/issues/15605
+ default = "/dev/null"
+ description = "Path to file containing your ssh private key"
+}
+
+variable "admin_username" {
+  description = "Username of the OS. (Defaults can be found here modules/dcos-tested-openstack-oses/azure_template_file.tf)"
+  default = ""
+}
+
+variable "region" {
+  description = "OpenStack region to launch servers."
+  default     = "RegionOne"
+}
+
+variable "os" {
+  default = "coreos"
+  description = "Recommended DC/OS OSs are centos_7.2, coreos_1235.9.0, coreos_835.13.0. CoreOS versions are bundled under \"coreos\""
+}
+
+variable "master_instance_flavor" {
+  description = "OpenStack flavor to use for the DC/OS master instances"
+}
+
+variable "bootstrap_instance_flavor" {
+  description = "OpenStack flavor to use for the DC/OS Bootstrap instance"
+}
+
+variable "private_agent_instance_flavor" {
+  description = "OpenStack flavor to use for the DC/OS private agent instances"
+}
+
+variable "public_agent_instance_flavor" {
+  description = "OpenStack flavor to use for the DC/OS public agent instances"
+}
+
+variable "num_of_private_agents" {
+  description = "DC/OS Private Agents Count"
+  default = 2
+}
+
+variable "num_of_public_agents" {
+  description = "DC/OS Private Agents Count"
+  default = 1
+}
+
+variable "num_of_masters" {
+  description = "DC/OS Master Nodes Count (Odd only)"
+  default = 3
+}
+
+variable "owner" {
+  description = "Paired with Cloud Cluster Cleaner will notify on expiration via slack. Default is whoami. Can be overwritten by setting the value here"
+  default = ""
+}
+
+variable "expiration" {
+  description = "Paired with Cloud Cluster Cleaner will notify on expiration via slack"
+  default = "1h"
+}
+
+variable "ip-detect" {
+ type = "string"
+ default = "scripts/cloud/openstack/ip-detect.openstack.sh"
+ description = "Used to determine the private IP address of instances"
+}
+
+variable "custom_dcos_bootstrap_port" {
+ default = "80"
+ description = "Nginx Port for serving bootstrap files"
+}
+
+variable "custom_dcos_download_path" {
+ default = ""
+ description = "REVIEW: Custom DC/OS version path"
+}
+
+variable "dcos_security" {
+ default = ""
+ description = "DC/OS EE security mode: either disabled, permissive, or strict."
+}
+
+variable "dcos_resolvers" {
+  type = "list"
+  description = "DNS Resolver for name resolution. These resolvers are applied both on the public and private subnets as well as used by the tf_dcos_core module."
+}
+
+variable "dcos_oauth_enabled" {
+ type = "string"
+ default = ""
+ description = "DC/OS Open Flag for Open Auth"
+}
+
+variable "dcos_master_external_loadbalancer" {
+ default = ""
+ description = "Used to allow DC/OS to set any required certs. Used for DC/OS EE."
+}
+
+variable "dcos_master_discovery" {
+ # REVIEW: Should the default be static or master_http_loadbalancer?
+ default = "static"
+ description = "Ability to use a load balancer or a static list for master discovery - way that agents find master nodes."
+}
+
+variable "dcos_aws_template_storage_bucket" {
+ default = ""
+ description = "This parameter specifies the name of your S3 bucket"
+}
+
+variable "dcos_aws_template_storage_bucket_path" {
+ default = ""
+ description = "This parameter specifies the S3 bucket storage path"
+}
+
+variable "dcos_aws_template_storage_region_name" {
+ default = ""
+ description = "This parameter specifies the S3 region"
+}
+
+variable "dcos_aws_template_upload" {
+ default = ""
+ description = "This parameter specifies whether to automatically upload the customized advanced templates to your S3 bucket"
+}
+
+variable "dcos_aws_template_storage_access_key_id" {
+ default = ""
+ description = "This parameters specifies the AWS Access Key ID"
+}
+
+variable "dcos_aws_template_storage_secret_access_key" {
+ default = ""
+ description = "This parameter specifies the AWS Secret Access Key"
+}
+
+variable "dcos_exhibitor_storage_backend" {
+ default = "static"
+ description = "specify an external storage system (static, zookeeper, azure, and aws_s3)"
+}
+
+variable "dcos_exhibitor_zk_hosts" {
+ default = ""
+ description = "This parameter specifies a comma-separated list (<ZK_IP>:<ZK_PORT>, <ZK_IP>:<ZK_PORT>, <ZK_IP:ZK_PORT>) of one or more ZooKeeper node IP and port addresses to use for configuring the internal Exhibitor instances"
+}
+
+variable "dcos_exhibitor_zk_path" {
+ default = ""
+ description = "This parameter specifies the filepath that Exhibitor uses to store data"
+}
+
+variable "dcos_aws_access_key_id" {
+ default = ""
+ description = "This parameter specifies AWS key ID"
+}
+
+variable "dcos_aws_region" {
+ default = ""
+ description = "This parameter specifies AWS region for your S3 bucket."
+}
+
+variable "dcos_aws_secret_access_key" {
+ default = ""
+ description = "This parameter specifies AWS secret access key"
+}
+
+variable "dcos_exhibitor_explicit_keys" {
+ default = ""
+ description = "This parameter specifies whether you are using AWS API keys to grant Exhibitor access to S3."
+}
+
+variable "dcos_s3_bucket" {
+ default = ""
+ description = "This parameter specifies name of your S3 bucket."
+}
+
+variable "dcos_s3_prefix" {
+ default = ""
+ description = "This parameter specifies S3 prefix to be used within your S3 bucket to be used by Exhibitor."
+}
+
+variable "dcos_exhibitor_azure_account_name" {
+ default = ""
+ description = "This parameter specifies the Azure Storage Account Name. If you specify azure for exhibitor backed set this value."
+}
+
+variable "dcos_exhibitor_azure_account_key" {
+ default = ""
+ description = "This parameter specifies a secret key to access the Azure Storage Account. If you specify azure for exhibitor backed set this value."
+}
+
+variable "dcos_exhibitor_azure_prefix" {
+ default = ""
+ description = "This parameter specifies the blob prefix to be used within your Storage Account to be used by Exhibitor. If you specify azure for exhibitor backed set this value."
+}
+
+variable "dcos_exhibitor_address" {
+ default = ""
+ description = "This required parameter specifies the location (preferably an IP address) of the load balancer in front of the masters."
+}
+
+variable "dcos_num_masters" {
+ default = ""
+ description = "This parameter specifies the number of Mesos masters in your DC/OS cluster. If master_discovery: static, do not use the num_masters parameter"
+}
+
+variable "dcos_customer_key" {
+ default = ""
+ description = "This parameter specifies the Enterprise DC/OS customer key."
+}
+
+variable "dcos_rexray_config_method" {
+ default = ""
+ description = "This parameter specifies the REX-Ray configuration method for enabling external persistent volumes in Marathon. "
+}
+
+variable "dcos_rexray_config_filename" {
+ default = ""
+ description = "Specify the path to a REX-Ray configuration file with rexray_config_filename"
+}
+
+variable "dcos_auth_cookie_secure_flag" {
+ default = ""
+ description = "This parameter specifies whether to allow web browsers to send the DC/OS authentication cookie through a non-HTTPS connection. Because the DC/OS authentication cookie allows access to the DC/OS cluster, it should be sent over an encrypted connection to prevent man-in-the-middle attacks."
+}
+
+variable "dcos_bouncer_expiration_auth_token_days" {
+ default = ""
+ description = "This parameter sets the auth token time-to-live (TTL) for Identity and Access Management."
+}
+
+variable "ssh_port" {
+ default = "22"
+ description = "This parameter specifies the port to SSH to"
+}
+
+variable "dcos_superuser_password_hash" {
+ default = ""
+ description = "This required parameter specifies the hashed superuser password. (EE only)"
+}
+
+variable "dcos_cluster_name" {
+ default = ""
+ description = "Name of the DC/OS Cluster"
+}
+
+variable "dcos_superuser_username" {
+ default = ""
+ description = "This required parameter specifies the Admin username. (EE only)"
+}
+
+variable "dcos_telemetry_enabled" {
+ default = ""
+ description = "This parameter specifies whether to enable sharing of anonymous data for your cluster."
+}
+
+variable "dcos_zk_super_credentials" {
+ default = ""
+ description = "This parameter specifies the ZooKeeper superuser credentials. (EE only)"
+}
+
+variable "dcos_zk_master_credentials" {
+ default = ""
+ description = "This parameter specifies the ZooKeeper master credentials."
+}
+
+variable "dcos_zk_agent_credentials" {
+ default = ""
+ description = "This parameter specifies the ZooKeeper agent credentials. "
+}
+
+variable "dcos_overlay_enable" {
+ default = ""
+ description = "Enable the DC/OS virtual network. "
+}
+
+variable "dcos_overlay_config_attempts" {
+ default = ""
+ description = "This parameter specifies how many failed configuration attempts are allowed before the overlay configuration modules stop trying to configure an virtual network."
+}
+
+variable "dcos_overlay_mtu" {
+ default = ""
+ description = "This parameter specifies the maximum transmission unit (MTU) of the Virtual Ethernet (vEth) on the containers that are launched on the overlay."
+}
+
+# Example how to set an overlay network below
+# default = "{\"vtep_mac_oui\": \"70:B3:D5:00:00:00\", \"overlays\": [{\"name\": \"dcos\", \"subnet\": \"9.0.0.0/8\", \"prefix\": 26}], \"vtep_subnet\": \"44.128.0.0/20\"}"
+
+variable "dcos_overlay_network" {
+ default = ""
+ description = "Specify this in line in a new line (\\n) fashion. See https://docs.mesosphere.com/1.8/administration/installing/custom/configuration-parameters/ for more information"
+}
+
+variable "dcos_dns_search" {
+ default = ""
+ description = "This parameter specifies a space-separated list of domains that are tried when an unqualified domain is entered"
+}
+
+variable "dcos_master_dns_bindall" {
+ default = ""
+ description = "This parameter specifies whether the master DNS port is open. An open master DNS port listens publicly on the masters."
+}
+
+variable "dcos_use_proxy" {
+ default = ""
+ description = "This parameter specifies whether to enable the DC/OS proxy."
+}
+
+variable "dcos_http_proxy" {
+ default = ""
+ description = "This parameter specifies the HTTP proxy."
+}
+
+variable "dcos_https_proxy" {
+ default = ""
+ description = "This parameter specifies the HTTPS proxy"
+}
+
+variable "dcos_no_proxy" {
+ default = ""
+ description = "This parameter specifies YAML nested list (-) of addresses to exclude from the proxy."
+}
+
+variable "dcos_check_time" {
+ default = ""
+ description = "This parameter specifies whether to check if Network Time Protocol (NTP) is enabled during DC/OS startup. It recommended that NTP is enabled for a production environment."
+}
+
+variable "dcos_docker_remove_delay" {
+ default = ""
+ description = "This parameter specifies the amount of time to wait before removing stale Docker images stored on the agent nodes and the Docker image generated by the installer. "
+}
+
+variable "dcos_audit_logging" {
+ default = ""
+ description = "This parameter specifies whether security decisions (authentication, authorization) are logged for Mesos, Marathon, and Jobs."
+}
+
+variable "dcos_gc_delay" {
+ default = ""
+ description = "This parameter specifies the maximum amount of time to wait before cleaning up the executor directories. It is recommended that you accept the default value of 2 days."
+}
+
+variable "dcos_log_directory" {
+ default = ""
+ description = "This parameter specifies the path to the installer host logs from the SSH processes. By default this is set to /genconf/logs."
+}
+
+variable "dcos_process_timeout" {
+ default = ""
+ description = "This parameter specifies the allowable amount of time, in seconds, for an action to begin after the process forks. This parameter is not the complete process time. The default value is 120 seconds."
+}
+
+variable "dcos_version" {
+ default = "1.11.1"
+ description = "DCOS Version"
+}
+
+variable "dcos_cluster_docker_credentials" {
+ default = ""
+ description = "This parameter specifies a dictionary of Docker credentials to pass."
+}
+
+variable "dcos_cluster_docker_credentials_dcos_owned" {
+ default = ""
+ description = "This parameter specifies whether to store the credentials file in /opt/mesosphere or /etc/mesosphere/docker_credentials. A sysadmin cannot edit /opt/mesosphere directly."
+}
+
+variable "dcos_cluster_docker_credentials_write_to_etc" {
+ default = ""
+ description = "This parameter specifies whether to write a cluster credentials file."
+}
+
+variable "dcos_cluster_docker_credentials_enabled" {
+ default = ""
+ description = "This parameter specifies whether to pass the Mesos --docker_config option to Mesos."
+}
+
+variable "dcos_cluster_docker_registry_enabled" {
+ default = ""
+ description = "This parameter specifies whether to pass the Mesos --docker_config option to Mesos."
+}
+
+variable "dcos_cluster_docker_registry_url" {
+ default = ""
+ description = "This parameter specifies a custom URL that Mesos uses to pull Docker images from. If set, it will configure the Mesos’ --docker_registry flag to the specified URL. This changes the default URL Mesos uses for pulling Docker images. By default https://registry-1.docker.io is used."
+}
+
+variable "dcos_enable_docker_gc" {
+ default = ""
+ description = "This parameter specifies whether to run the docker-gc script, a simple Docker container and image garbage collection script, once every hour to clean up stray Docker containers. You can configure the runtime behavior by using the /etc/ config. For more information, see the documentation"
+}
+
+variable "dcos_staged_package_storage_uri" {
+ default = ""
+ description = "This parameter specifies where to temporarily store DC/OS packages while they are being added. The value must be a file URL, for example, file:///var/lib/dcos/cosmos/staged-packages."
+}
+
+variable "dcos_package_storage_uri" {
+ default = ""
+ description = "This parameter specifies where to permanently store DC/OS packages. The value must be a file URL, for example, file:///var/lib/dcos/cosmos/packages."
+}
+
+variable "dcos_previous_version" {
+ default = ""
+ description = "Required by the DC/OS installer instructions to ensure the operator know what version they are upgrading from."
+}
+
+# Example value on how to configure rexray below
+# default = "{\"rexray\": {\"modules\": {\"default-docker\": {\"disabled\": true}, \"default-admin\": {\"host\": \"tcp://127.0.0.1:61003\"}}, \"loglevel\": \"info\"}}"
+
+variable "dcos_rexray_config" {
+ default = ""
+}
+
+variable "dcos_config" {
+ description = "User populated flags meant for undocumented dcos config"
+ default = ""
+}
+
+variable "state" {
+ default = "install"
+ description = "Support installing or Upgrading DC/OS"
+}
+
+variable "dcos_ip_detect_public_contents" {
+  default = "\"'#!/bin/sh\\n\\n  curl -fsSL \\\"http://169.254.169.254/latest/meta-data/public-ipv4\\\"\\n\\n   '\\n\""
+ description = "Used for OpenStack to determine the public IP. Note: single quotes was subsututed for hex x27 as it cannot be used. Currently escapes will need to be performed twice. DC/OS bug requires this variable instead of a file see https://jira.mesosphere.com/browse/DCOS_OSS-905 for more information."
+}
+
+variable "os_floating_ip_pool" {
+  type = "string"
+  description = "OpenStack public floating ip to assign public ips to boot and to master nodes"
+}
+
+variable "os_image_name" {
+  type = "string"
+  description = "Image available in OpenStack to use for VMs"
+}
+
+variable "os_external_network_id" {
+  type = "string"
+  description = "OpenStack network that is to the outside world"
+}
+
+variable "ntp_servers" {
+  default = []
+  type = "list"
+  description = "Set custom NTP servers. DC/OS poststart checks desires time to by synchronized."
+}