<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    Hello,<br>
    <br>
    If you use CLI, you can use a script (with all your rules "nova
    secgroup-add-rule default") and send the tenant_name as parameter.<br>
    <br>
    The best way (I think) is to script the tenant creation which
    includes all your security group rules.<br>
    <br>
    <br>
    <br>
    <div class="moz-cite-prefix">On 04/05/2016 01:28 PM, Tom Verdaat
      wrote:<br>
    </div>
    <blockquote
cite="mid:CACznH7ZsNGx4sOQLfLcRHM3=yOHrB-5VfpBTv8k-TcrmqXTscA@mail.gmail.com"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html;
        charset=windows-1252">
      <div dir="ltr">
        <div>No it is not possible at this time.<br>
          <br>
        </div>
        Easiest workaround right now is to use a HEAT template to create
        a custom security group with the settings you're looking for and
        find a way to load it automatically for all new tenants.<br>
        <div>
          <div>
            <div><br>
              This blueprint is marked obsolete because it doesn't
              comply with the new specification requirements. Hope
              somebody resubmits this because it is a valuable feature
              that should have been developed a long time ago!<br>
              <br>
            </div>
            <div>Tom<br>
              <br>
            </div>
          </div>
        </div>
        <div class="gmail_extra"><br>
          <div class="gmail_quote">2016-04-05 12:57 GMT+02:00 Tomas
            Vondra <span dir="ltr"><<a moz-do-not-send="true"
                href="mailto:vondra@czech-itc.cz" target="_blank">vondra@czech-itc.cz</a>></span>:<br>
            <blockquote class="gmail_quote" style="margin:0 0 0
              .8ex;border-left:1px #ccc solid;padding-left:1ex"><span
                class="">Jagga <a class="moz-txt-link-rfc2396E" href="mailto:jagga13@..."><jagga13@...></a> writes:<br>
                <br>
                ><br>
                > Hi Guys,<br>
                ><br>
                > I was wondering if there is a way for us to change
                what the default<br>
                security group looks like for new projects<br>
                > without having to change it manually.  Basically I
                want to make sure that<br>
                when a new project is created it<br>
                > automatically gets a minimal set of our standard
                rules.  Is there a way I<br>
                can do this?<br>
                ><br>
                > Also changing the default security group in one
                project should not change<br>
                anything for another project<br>
                > right?  Meaning even though the default security
                group shares the same<br>
                name between projects/tenants it<br>
                > is specific to only that one project.<br>
                ><br>
                > Thanks.<br>
                ><br>
                <br>
                <br>
              </span>Hi!<br>
              Looking at this quite recently obsoleted blueprint, I
              would say it is not<br>
              possible.<br>
              <a moz-do-not-send="true"
                href="https://blueprints.launchpad.net/neutron/+spec/"
                rel="noreferrer" target="_blank">https://blueprints.launchpad.net/neutron/+spec/</a><br>
              default-rules-for-default-security-group<br>
              <span class="HOEnZb"><font color="#888888">Tomas<br>
                </font></span>
              <div class="HOEnZb">
                <div class="h5"><br>
                  <br>
                  _______________________________________________<br>
                  Mailing list: <a moz-do-not-send="true"
                    href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack"
                    rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
                  Post to     : <a moz-do-not-send="true"
                    href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
                  Unsubscribe : <a moz-do-not-send="true"
                    href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack"
                    rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
                </div>
              </div>
            </blockquote>
          </div>
          <br>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
Mailing list: <a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a>
Post to     : <a class="moz-txt-link-abbreviated" href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>
Unsubscribe : <a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>