Re: [Openstack-operators] Security Groups and Metadata Service

2017-12-06 Thread Matt Riedemann
On 12/5/2017 3:32 AM, Saverio Proto wrote: Hello, we have this recurring problem with our users. An advanced user deletes all the default security groups to create his own. This user will define only ingress rules. Because there is no egress rule, the cloud-init will fail to open a connection

Re: [Openstack-operators] Security Groups and Metadata Service

2017-12-05 Thread Jeremy Stanley
On 2017-12-05 10:32:10 +0100 (+0100), Saverio Proto wrote: [...] > Because there is no egress rule, the cloud-init will fail to open a > connection to the metadata service. [...] > Does anyone has a good solution to prevent the user from setting the > system in a such a way that does not work ?? P

[Openstack-operators] Security Groups and Metadata Service

2017-12-05 Thread Saverio Proto
Hello, we have this recurring problem with our users. An advanced user deletes all the default security groups to create his own. This user will define only ingress rules. Because there is no egress rule, the cloud-init will fail to open a connection to the metadata service. The user will open