Add security group for neutron ports
During testing of scale heat rally test for neutron (HeatStack.create_and_delete_stack) is falling because neutron creates multiple security groups but nova cannot define which one should it use. As a result nova cannot boot an instance. The fix defines default security group in the server_with_ports.yaml.template, so nova will choose the one specific group. In addition, the deprecated attribute network_id in the template has been replaced with the network attribute. Change-Id: I5e610f0fe3817fdbf6acd1e62ef7a5de3273874a Closes-bug: #1428066
This commit is contained in:
parent
22c596b554
commit
63382d2889
@ -45,9 +45,20 @@ resources:
|
|||||||
network: { get_resource: private_net }
|
network: { get_resource: private_net }
|
||||||
cidr: {get_param: cidr}
|
cidr: {get_param: cidr}
|
||||||
|
|
||||||
|
port_security_group:
|
||||||
|
type: OS::Neutron::SecurityGroup
|
||||||
|
properties:
|
||||||
|
name: default_port_security_group
|
||||||
|
description: >
|
||||||
|
Default security group assigned to port. The neutron default group is not
|
||||||
|
used because neutron creates several groups with the same name=default and
|
||||||
|
nova cannot chooses which one should it use.
|
||||||
|
|
||||||
server_port:
|
server_port:
|
||||||
type: OS::Neutron::Port
|
type: OS::Neutron::Port
|
||||||
properties:
|
properties:
|
||||||
network: {get_resource: private_net}
|
network: {get_resource: private_net}
|
||||||
fixed_ips:
|
fixed_ips:
|
||||||
- subnet_id: { get_resource: private_subnet }
|
- subnet: { get_resource: private_subnet }
|
||||||
|
security_groups:
|
||||||
|
- { get_resource: port_security_group }
|
Loading…
Reference in New Issue
Block a user