Open Stack

On 12/06/2017 14:45, Jose Manuel Ferrer Mosteiro wrote:
> Some times I forget to setting the security groups ...
>
It happens to me too...
:-)

Not this time, though.
:-)

Thank you, anyway.

Cheers,
Dave


>   # Security group that allows all from all sources
>   elasticsearch_security_group:
>     type: OS::Neutron::SecurityGroup
>     properties:
>       name: elasticsearch_security_group
>       rules:
>         - remote_ip_prefix: 0.0.0.0/0
>           protocol: tcp
>           port_range_min: 9200
>           port_range_max: 9200
>         - remote_ip_prefix: { get_param: cidr }
>           protocol: tcp
>           port_range_min: 9300
>           port_range_max: 9300
>         - remote_ip_prefix: 0.0.0.0/0
>           protocol: icmp
>
>
>   # create server ports (ip addresses)
>   # needed to configure ansible inventory and /etc/hosts
>   elasticsearch_01_server_port:
>     type: OS::Neutron::Port
>     properties:
>        network: { get_resource: elasticsearch_private_net }
>        security_groups:
>          - { get_resource: elasticsearch_security_group }
>        fixed_ips:
>          - subnet_id: { get_resource: elasticsearch_private_subnet }
>
>
>   # elasticsearch_01_server
>   elasticsearch_01_server_public:
>     type: OS::Neutron::FloatingIP
>     properties:
>       floating_network_id: { get_param: public_net_id }
>       port_id: { get_resource: elasticsearch_01_server_port }
>
>
>   elasticsearch_01_server:
>     type: OS::Nova::Server
>     properties:
>       name: { get_param: elasticsearch_01_hostname }
>       key_name: { get_param: key_name }
>       image: { get_param: image_id }
>       flavor: { get_param: instance_flavor }
>       networks:
>         - port: { get_resource: elasticsearch_01_server_port }
>       availability_zone: { get_param:
> elasticsearch_01_availability_zone }
>
>


-- 

Ing. D. Davide Lamanna  -  CEO

mobile: 340 4830930   voip: 06 916504256   fax: 06 233225276   
Via Salaria, 292 - 00199 Roma		www.binarioetico.it