Hello list,

When creating a new load balancer using Octavia, I noticed the VIP network port gets assigned a dynamic created Security Group.

The Security Group does not contain a rule allowing ICMP, therefore the VIP not being "pingable". Other than harder diagnostics, it could pose PMTU issues and such.

Is it maybe possible to either just enable ICMP, or maybe template the dynamic Security Groups?

Thanks in advance!

Cheers,
Kees