<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hello,<br>
<br>
If you use CLI, you can use a script (with all your rules "nova
secgroup-add-rule default") and send the tenant_name as parameter.<br>
<br>
The best way (I think) is to script the tenant creation which
includes all your security group rules.<br>
<br>
<br>
<br>
<div class="moz-cite-prefix">On 04/05/2016 01:28 PM, Tom Verdaat
wrote:<br>
</div>
<blockquote
cite="mid:CACznH7ZsNGx4sOQLfLcRHM3=yOHrB-5VfpBTv8k-TcrmqXTscA@mail.gmail.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<div dir="ltr">
<div>No it is not possible at this time.<br>
<br>
</div>
Easiest workaround right now is to use a HEAT template to create
a custom security group with the settings you're looking for and
find a way to load it automatically for all new tenants.<br>
<div>
<div>
<div><br>
This blueprint is marked obsolete because it doesn't
comply with the new specification requirements. Hope
somebody resubmits this because it is a valuable feature
that should have been developed a long time ago!<br>
<br>
</div>
<div>Tom<br>
<br>
</div>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">2016-04-05 12:57 GMT+02:00 Tomas
Vondra <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:vondra@czech-itc.cz" target="_blank">vondra@czech-itc.cz</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex"><span
class="">Jagga <a class="moz-txt-link-rfc2396E" href="mailto:jagga13@..."><jagga13@...></a> writes:<br>
<br>
><br>
> Hi Guys,<br>
><br>
> I was wondering if there is a way for us to change
what the default<br>
security group looks like for new projects<br>
> without having to change it manually. Basically I
want to make sure that<br>
when a new project is created it<br>
> automatically gets a minimal set of our standard
rules. Is there a way I<br>
can do this?<br>
><br>
> Also changing the default security group in one
project should not change<br>
anything for another project<br>
> right? Meaning even though the default security
group shares the same<br>
name between projects/tenants it<br>
> is specific to only that one project.<br>
><br>
> Thanks.<br>
><br>
<br>
<br>
</span>Hi!<br>
Looking at this quite recently obsoleted blueprint, I
would say it is not<br>
possible.<br>
<a moz-do-not-send="true"
href="https://blueprints.launchpad.net/neutron/+spec/"
rel="noreferrer" target="_blank">https://blueprints.launchpad.net/neutron/+spec/</a><br>
default-rules-for-default-security-group<br>
<span class="HOEnZb"><font color="#888888">Tomas<br>
</font></span>
<div class="HOEnZb">
<div class="h5"><br>
<br>
_______________________________________________<br>
Mailing list: <a moz-do-not-send="true"
href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack"
rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
Post to : <a moz-do-not-send="true"
href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
Unsubscribe : <a moz-do-not-send="true"
href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack"
rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Mailing list: <a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a>
Post to : <a class="moz-txt-link-abbreviated" href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>
Unsubscribe : <a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a>
</pre>
</blockquote>
<br>
</body>
</html>