You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@cloudstack.apache.org by sebgoa <ru...@gmail.com> on 2013/09/17 13:39:33 UTC

securitygroup confusion

Hi,

I am looking at http://cloudstack.apache.org/docs/api/apidocs-4.1/root_admin/authorizeSecurityGroupIngress.html

you can pass a cidrlist and a securitygroupname (exclusive with securitygroupid).

Are those exclusive ?

Say I want to open port 22 for 1.1.1.1/0 and all VMs in securitygroup foobar.

Can I create this rule with a single call by specifying foobar for securitygroupname ?

I am asking because listSecurityGroups:
http://cloudstack.apache.org/docs/api/apidocs-4.1/root_admin/listSecurityGroups.html

returns the name of the sg and a securitygroupname under the ingress/egress/rule 

And also on one cloud I am using some of the rules don't have a cidr key because they are set for sg internals.

thoughts ?

-sebastien