[Bug 1429862] Re: Spinning nova testbeds in given security-groups

[Martin Pitt]

Hey Celso,

this is a proposed patch against the current nova setup script. As I
cannot test this myself (no cloud access) and don't want to commit it
blindly, would you mind giving this a spin?

Thanks!

** Patch added: "proposed patch"
   https://bugs.launchpad.net/ubuntu/+source/autopkgtest/+bug/1429862/+attachment/4339646/+files/proposed.patch

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to autopkgtest in Ubuntu.
https://bugs.launchpad.net/bugs/1429862

Title:
  Spinning nova testbeds in given security-groups

Status in autopkgtest package in Ubuntu:
  In Progress

Bug description:
  This is a feature request to the current nova-ssh setup support for
  having more secure testbeds  in wild cloud-environments.

  I am looking for a way to spin testbeds that are only accessible from
  an specific keypair (already supported by the --key-pair option) and
  has access restrictions defined by specifics security group, for
  instance:

  {{{
  nova boot ... --security-groups <testbed-0>
  }}}

  The 'testbed-0' security group would be created prior to the `adt-run`
  allowing only ssh connections from the host and possibly internet
  access (for pkgs which needs it). This way the testbed access to other
  testbeds or infrastructure components within the same cloud could be
  programatically restricted.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/autopkgtest/+bug/1429862/+subscriptions