The script currently complains about multiple default security groups. This
obtains the default and uses it when creating security group rules.
Change-Id: I81e59eae5df79889ed1fb02d45af26e3a55aa0e9
| ... | ... |
@@ -41,6 +41,13 @@ if is_service_enabled nova; then |
| 41 | 41 |
fi |
| 42 | 42 |
done |
| 43 | 43 |
|
| 44 |
+ # Update security default group |
|
| 45 |
+ # ----------------------------- |
|
| 46 |
+ |
|
| 47 |
+ # Add tcp/22 and icmp to default security group |
|
| 48 |
+ default=$(openstack security group list -f value -c ID) |
|
| 49 |
+ openstack security group rule create $default --protocol tcp --dst-port 22 |
|
| 50 |
+ openstack security group rule create $default --protocol icmp |
|
| 44 | 51 |
|
| 45 | 52 |
# Create A Flavor |
| 46 | 53 |
# --------------- |
| ... | ... |
@@ -57,12 +64,4 @@ if is_service_enabled nova; then |
| 57 | 57 |
openstack flavor create $MI_NAME --id 6 --ram 128 --disk 0 --vcpus 1 |
| 58 | 58 |
fi |
| 59 | 59 |
|
| 60 |
- |
|
| 61 |
- # Other Uses |
|
| 62 |
- # ---------- |
|
| 63 |
- |
|
| 64 |
- # Add tcp/22 and icmp to default security group |
|
| 65 |
- openstack security group rule create --project $OS_PROJECT_NAME default --protocol tcp --ingress --dst-port 22 |
|
| 66 |
- openstack security group rule create --project $OS_PROJECT_NAME default --protocol icmp |
|
| 67 |
- |
|
| 68 | 60 |
fi |