Ubuntu Cloud Archive

  1. Series rocky
  2. Bug #1813007
  3. Comment #6

Comment 6 for bug 1813007

Revision history for this message
Corey Bryant (corey.bryant) wrote : Re: Unable to install new flows on compute nodes when having broken security group rules

I'm working on recreating this but any more details you can provide in the mean time will help speed that up (ie. juju crashdump and ensuing commands that lead up to the error).

As I understand it, creation of a security group rule B with '--remote-group A' specifies that rule B applies to any instances that use rule A. [1]

That said, can you explain why the rule for tcp 5672:5672 is needed along with the rule for tcp port_range_min:port_range_max? ie. Is the former a subset of the latter?

Thanks,
Corey

[1] https://docs.openstack.org/nova/queens/admin/security-groups.html#create-security-group-rules-for-a-cluster-of-instances