diff --git a/examples/openstack-compute-tosca.yaml b/examples/openstack-compute-tosca.yaml
new file mode 100644
index 0000000..02951dd
--- /dev/null
+++ b/examples/openstack-compute-tosca.yaml
@@ -0,0 +1,85 @@
+---
+
+# Copyright 2018-present Open Networking Foundation
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# TOSCA recipe for adding a sample R-CORD subscriber
+#
+# http POST $(minikube service xos-tosca --url)/run \
+#  xos-username:admin@opencord.org xos-password:letmein \
+#  @./openstack-compute-tosca.yaml
+
+tosca_definitions_version: tosca_simple_yaml_1_0
+
+imports:
+  - custom_types/deployment.yaml
+  - custom_types/node.yaml
+  - custom_types/site.yaml
+  - custom_types/sitedeployment.yaml
+
+description: Adds OpenStack compute nodes
+
+topology_template:
+  node_templates:
+
+# Site/Deployment, fully defined in deployment.yaml
+    mysite:
+      type: tosca.nodes.Site
+      properties:
+        name: mysite
+        must-exist: true
+
+    MyDeployment:
+      type: tosca.nodes.Deployment
+      properties:
+        name: MyDeployment
+        must-exist: true
+
+# OpenStack compute nodes
+
+    head1:
+      type: tosca.nodes.Node
+      properties:
+        name: head1
+      requirements:
+        - site_deployment:
+            node:  mysite_MyDeployment
+            relationship: tosca.relationships.BelongsToOne
+    compute1:
+      type: tosca.nodes.Node
+      properties:
+        name: compute1
+      requirements:
+        - site_deployment:
+            node:  mysite_MyDeployment
+            relationship: tosca.relationships.BelongsToOne
+    compute2:
+      type: tosca.nodes.Node
+      properties:
+        name: compute2
+      requirements:
+        - site_deployment:
+            node:  mysite_MyDeployment
+            relationship: tosca.relationships.BelongsToOne
+
+    mysite_MyDeployment:
+      type: tosca.nodes.SiteDeployment
+      requirements:
+        - site:
+            node: mysite
+            relationship: tosca.relationships.BelongsToOne
+        - deployment:
+            node: MyDeployment
+            relationship: tosca.relationships.BelongsToOne
+
diff --git a/examples/openstack-instance-tosca.yaml b/examples/openstack-instance-tosca.yaml
new file mode 100644
index 0000000..3f2ec6c
--- /dev/null
+++ b/examples/openstack-instance-tosca.yaml
@@ -0,0 +1,91 @@
+---
+
+# Copyright 2018-present Open Networking Foundation
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# TOSCA recipe for adding a sample R-CORD subscriber
+#
+# http POST $(minikube service xos-tosca --url)/run \
+#  xos-username:admin@opencord.org xos-password:letmein \
+#  @./openstack-instance-tosca.yaml
+
+tosca_definitions_version: tosca_simple_yaml_1_0
+
+imports:
+  - custom_types/deployment.yaml
+  - custom_types/flavor.yaml
+  - custom_types/image.yaml
+  - custom_types/node.yaml
+  - custom_types/instance.yaml
+  - custom_types/slice.yaml
+
+description: openstack extensions to deployment
+
+topology_template:
+  node_templates:
+
+# Images and flavors
+    Cirros-0.3.5:
+      type: tosca.nodes.Image
+      properties:
+        name: "Cirros 0.3.5 64-bit"
+        must-exist: true
+
+    m1.tiny:
+      type: tosca.nodes.Flavor
+      properties:
+        name: m1.tiny
+        must-exist: true
+
+    MyDeployment:
+      type: tosca.nodes.Deployment
+      properties:
+        name: MyDeployment
+        must-exist: true
+
+    mysite_test:
+      description: Test Slice
+      type: tosca.nodes.Slice
+      properties:
+        name: mysite_test
+        must-exist: true
+
+    compute1:
+      type: tosca.nodes.Node
+      properties:
+        name: compute1
+        must-exist: true
+
+    test_instance:
+      description: Test Instance
+      type: tosca.nodes.Instance
+      properties:
+        name: test_instance
+      requirements:
+        - image:
+            node: Cirros-0.3.5
+            relationship: tosca.relationships.BelongsToOne
+        - deployment:
+            node: MyDeployment
+            relationship: tosca.relationships.BelongsToOne
+        - flavor:
+            node: m1.tiny
+            relationship: tosca.relationships.BelongsToOne
+        - slice:
+            node: mysite_test
+            relationship: tosca.relationships.BelongsToOne
+        - node:
+            node: compute1
+            relationship: tosca.relationships.BelongsToOne
+
diff --git a/examples/openstack-tosca.yaml b/examples/openstack-tosca.yaml
new file mode 100644
index 0000000..a2b8a5b
--- /dev/null
+++ b/examples/openstack-tosca.yaml
@@ -0,0 +1,155 @@
+---
+
+# Copyright 2018-present Open Networking Foundation
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# TOSCA recipe for adding a sample R-CORD subscriber
+#
+# http POST $(minikube service xos-tosca --url)/run \
+#  xos-username:admin@opencord.org xos-password:letmein \
+#  @./openstack-tosca.yaml
+
+tosca_definitions_version: tosca_simple_yaml_1_0
+
+imports:
+  - custom_types/controller.yaml
+  - custom_types/controllersite.yaml
+  - custom_types/deployment.yaml
+  - custom_types/flavor.yaml
+  - custom_types/image.yaml
+  - custom_types/site.yaml
+  - custom_types/networktemplate.yaml
+  - custom_types/network.yaml
+  - custom_types/networkslice.yaml
+  - custom_types/slice.yaml
+  - custom_types/sitedeployment.yaml
+
+description: openstack extensions to deployment
+
+topology_template:
+  node_templates:
+
+# Images and flavors
+    Cirros-0.3.5:
+      type: tosca.nodes.Image
+      properties:
+        name: "Cirros 0.3.5 64-bit"
+        disk_format: QCOW2
+        container_format: BARE
+
+    m1.tiny:
+      type: tosca.nodes.Flavor
+      properties:
+        name: m1.tiny
+
+    m1.small:
+      type: tosca.nodes.Flavor
+      properties:
+        name: m1.small
+
+    m1.medium:
+      type: tosca.nodes.Flavor
+      properties:
+        name: m1.medium
+
+    m1.large:
+      type: tosca.nodes.Flavor
+      properties:
+        name: m1.large
+
+    m1.xlarge:
+      type: tosca.nodes.Flavor
+      properties:
+        name: m1.xlarge
+
+
+    MyDeployment:
+      type: tosca.nodes.Deployment
+      properties:
+        name: MyDeployment
+
+# OpenStack Controller
+    mysite_MyDeployment_openstack:
+      type: tosca.nodes.Controller
+      requirements:
+        - deployment:
+            node: MyDeployment
+            relationship: tosca.relationships.BelongsToOne
+      properties:
+          name: mysite_MyDeployment_openstack
+          backend_type: OpenStack
+          version: Newton
+          auth_url: http://keystone.openstack.svc.cluster.local/v3
+          admin_user: admin
+          admin_password: password
+          admin_tenant: admin
+          domain: Default
+
+# Site - adds openstack controller to site defined in deployment.yaml
+    mysite:
+      type: tosca.nodes.Site
+      properties:
+          name: mysite
+          must-exist: true
+          site_url: http://mysite.opencloud.us/
+          hosts_nodes: true
+
+    mysite_deployment_MyDeployment:
+        type: tosca.nodes.SiteDeployment
+        requirements:
+            - site:
+                node: mysite
+                relationship: tosca.relationships.BelongsToOne
+            - deployment:
+                node: MyDeployment
+                relationship: tosca.relationships.BelongsToOne
+            - controller:
+                node: mysite_MyDeployment_openstack
+                relationship: tosca.relationships.BelongsToOne
+
+    mysite_openstack_controller:
+        type: tosca.nodes.ControllerSite
+        requirements:
+            - site:
+                node: mysite
+                relationship: tosca.relationships.BelongsToOne
+            - controller:
+                node: mysite_MyDeployment_openstack
+                relationship: tosca.relationships.BelongsToOne
+
+
+# For creating a test VM
+    mysite_test:
+      description: Test Slice
+      type: tosca.nodes.Slice
+      properties:
+        # network: noauto
+        name: mysite_test
+      requirements:
+        - site:
+            node: mysite
+            relationship: tosca.relationships.BelongsToOne
+        - default_image:
+            node: Cirros-0.3.5
+            relationship: tosca.relationships.BelongsToOne
+
+
+# For private networks (e.g., per-slice)
+    private_template:
+      type: tosca.nodes.NetworkTemplate
+      properties:
+        name: Private
+        visibility: private
+        translation: none
+        vtn_kind: PRIVATE
diff --git a/xos-services/openstack/.helmignore b/xos-services/openstack/.helmignore
new file mode 100644
index 0000000..f0c1319
--- /dev/null
+++ b/xos-services/openstack/.helmignore
@@ -0,0 +1,21 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
diff --git a/xos-services/openstack/Chart.yaml b/xos-services/openstack/Chart.yaml
new file mode 100644
index 0000000..0e8058c
--- /dev/null
+++ b/xos-services/openstack/Chart.yaml
@@ -0,0 +1,21 @@
+---
+
+# Copyright 2018-present Open Networking Foundation
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+apiVersion: v1
+appVersion: "1.0"
+description: A Helm chart for XOS's "openstack" service
+name: openstack
+version: 0.1.0
diff --git a/xos-services/openstack/templates/_helpers.tpl b/xos-services/openstack/templates/_helpers.tpl
new file mode 100644
index 0000000..b61f963
--- /dev/null
+++ b/xos-services/openstack/templates/_helpers.tpl
@@ -0,0 +1,47 @@
+{{/* vim: set filetype=mustache: */}}
+{{/*
+Copyright 2018-present Open Networking Foundation
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/}}
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "openstack.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "openstack.fullname" -}}
+{{- if .Values.fullnameOverride -}}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- $name := default .Chart.Name .Values.nameOverride -}}
+{{- if contains $name .Release.Name -}}
+{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "openstack.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
diff --git a/xos-services/openstack/templates/configmap.yaml b/xos-services/openstack/templates/configmap.yaml
new file mode 100644
index 0000000..6d234c4
--- /dev/null
+++ b/xos-services/openstack/templates/configmap.yaml
@@ -0,0 +1,23 @@
+---
+
+# Copyright 2018-present Open Networking Foundation
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: openstack
+data:
+  serviceConfig: |
+{{ toYaml .Values.serviceConfig | indent 4 }}
diff --git a/xos-services/openstack/templates/deployment.yaml b/xos-services/openstack/templates/deployment.yaml
new file mode 100644
index 0000000..f202d79
--- /dev/null
+++ b/xos-services/openstack/templates/deployment.yaml
@@ -0,0 +1,73 @@
+---
+
+# Copyright 2018-present Open Networking Foundation
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+apiVersion: apps/v1beta2
+kind: Deployment
+metadata:
+  name: {{ template "openstack.fullname" . }}
+  labels:
+    app: {{ template "openstack.name" . }}
+    chart: {{ template "openstack.chart" . }}
+    release: {{ .Release.Name }}
+    heritage: {{ .Release.Service }}
+spec:
+  replicas: {{ .Values.replicaCount }}
+  selector:
+    matchLabels:
+      app: {{ template "openstack.name" . }}
+      release: {{ .Release.Name }}
+  template:
+    metadata:
+      labels:
+        app: {{ template "openstack.name" . }}
+        release: {{ .Release.Name }}
+      annotations:
+        checksum/config: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
+    spec:
+      containers:
+        - name: {{ .Chart.Name }}
+          image: "{{ .Values.pull_docker_registry }}{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          resources:
+{{ toYaml .Values.resources | indent 12 }}
+          volumeMounts:
+            - name: openstack-config
+              mountPath: /opt/xos/synchronizers/openstack/openstack_config.yaml
+              subPath: openstack_config.yaml
+            - name: cert-chain-secret
+              mountPath: /usr/local/share/ca-certificates
+      volumes:
+        - name: openstack-config
+          configMap:
+            name: openstack
+            items:
+              - key: serviceConfig
+                path: openstack_config.yaml
+        - name: cert-chain-secret
+          secret:
+            secretName: cert-chain-secret
+    {{- with .Values.nodeSelector }}
+      nodeSelector:
+{{ toYaml . | indent 8 }}
+    {{- end }}
+    {{- with .Values.affinity }}
+      affinity:
+{{ toYaml . | indent 8 }}
+    {{- end }}
+    {{- with .Values.tolerations }}
+      tolerations:
+{{ toYaml . | indent 8 }}
+    {{- end }}
diff --git a/xos-services/openstack/values.yaml b/xos-services/openstack/values.yaml
new file mode 100644
index 0000000..1a0e355
--- /dev/null
+++ b/xos-services/openstack/values.yaml
@@ -0,0 +1,66 @@
+---
+
+# Copyright 2018-present Open Networking Foundation
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Default values for addressmanager.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+replicaCount: 1
+
+pull_docker_registry:
+
+nameOverride: ""
+fullnameOverride: ""
+
+image:
+  repository: xosproject/openstack-synchronizer
+  tag: master
+  pullPolicy: IfNotPresent
+
+resources: {}
+
+nodeSelector: {}
+
+tolerations: []
+
+affinity: {}
+
+serviceConfig:
+  name: openstack-synchronizer
+  accessor:
+    username: admin@opencord.org
+    password: letmein
+    endpoint: xos-core:50051
+  dependency_graph: "/opt/xos/synchronizers/openstack/model-deps"
+  steps_dir: "/opt/xos/synchronizers/openstack/steps"
+  sys_dir: "/opt/xos/synchronizers/openstack/sys"
+  model_policies_dir: "/opt/xos/synchronizers/openstack/model_policies"
+  images_directory: "/opt/xos/images"
+  required_models:
+    - ControllerImages
+    - ControllerNetwork
+    - ControllerSitePrivilege
+    - ControllerSite
+    - ControllerSlicePrivilege
+    - ControllerSlice
+    - ControllerUser
+    - Image
+    - Instance
+    - Port
+    - Role
+  nova:
+    ca_ssl_cert: "/etc/ssl/certs/ca-certificates.crt"
+    enabled: True