Comment 4 for bug 1828112

I am having an issue with security groups as well.

When I create a cluster with profile like:

type: os.nova.server
version: 1.0
properties:
  flavor: r1.1
  image: dev-build-15
  networks:
     - network: dev
       security_groups:
         - group1
         - group2

  user_data: |
    #!/bin/bash

    echo "hello" > /tmp/test

I get the desired effect, with security groups set in all nodes

However, when I run openstack cluster update with a profile like

type: os.nova.server
version: 1.0
properties:
  flavor: r1.1
  image: dev-build-15
  networks:
     - network: dev
       security_groups:
         - group1
         - group2
         - group3

  user_data: |
    #!/bin/bash

    echo "hello" > /tmp/test

suddenly the security groups on all nodes are set to only default.

I have also tried a profile like

type: os.nova.server
version: 1.0
properties:
  flavor: r1.1
  image: dev-build-15
  networks:
     - network: dev
  security_groups:
     - group1
     - group2

  user_data: |
    #!/bin/bash

    echo "hello" > /tmp/test

But this just results in default only sec groups, regardless of whether it is cluster create or cluster update