http://docs.openstack.org/developer/heat/template_guide/openstack.html#OS::Nova::Server-prop-security_groups
security_groups:
List of security group names or IDs. Cannot be used if neutron ports are associated with this server; assign security groups to the ports instead.
List value expected.
Updates cause replacement.
Defaults to “[]”.
in kilo
heat-template is as follows:
heat_template_version: 2013-05-23
description: test
resources:
network:
type: OS::Neutron::Net
properties: {name: networks}
subnet:
type: OS::Neutron::Subnet
properties:
network_id: {Ref: network}
ip_version: 4
cidr: 122.0.3.0/24
allocation_pools:
- {end: 122.0.3.150, start: 122.0.3.20}
test_flavor:
type: OS::Nova::Flavor
properties:
ram: 128
vcpus: 1
disk: 5
swap: 0
test_image:
type: OS::Glance::Image
properties:
container_format: "bare"
disk_format: "qcow2"
is_public: true
location: "http://x.x.x.x/test/Fedora-20.qcow2"
min_disk: 5
min_ram: 128
name: "fedora"
test-server:
type: OS::Nova::Server
depends_on: [network, test_flavor, test_image]
properties:
flavor: {get_resource: test_flavor}
image: {get_resource: test_image}
name: "testserver"
security_groups: []
networks: [{"network": {get_resource: network}}]
vm test-server's security_groups:
security_groups | default
When create a instance on dashboard, you can see the security_groups is a must, at least, you can set it to be default.
[] is not an allowed value for this parameter.