> > > nova boot test --flavor m1.tiny --security_group ssh --security_group > http --nic net-id=xxxxxxxxxxx --nic port-id=yyyyyyyyyyy > > Which port/nic the security group should bind to? the first one? both? > Both groups will be set to a new port of xxx network. A set of port yyy SG will not be changed. This question was discussed here recently: http://lists.openstack.org/pipermail/openstack-dev/2015-February/056339.html. See also https://review.openstack.org/#/c/154068/ with its comments. > > The legacy network will be removed and I think it is the time to change > the API to satisfied the new situation. May be the new cli like below: > > nova boot test --flavor m1.tiny --nic > net-id=xxxxxx,security_group=ssh --nic port-id=yyyyyyyyy --nic > net-id=zzzzzzzz,security_group=http,security_group=mysql > I agree, API have to be more straightforward. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20150513/bcbcc2a0/attachment.html>