The default security groups that Juju generates allow ssh access from any source.
If units are all deployed in a single space, this effectively exposes port 22 to whichever other instance has been deployed in the same network.
It would be beneficial to be able to limit the source to a configurable cidr range, perhaps as a model config option.
The objective of this bug report is similar to the one of LP#1321407, although that bug report is concerned with exposed ports, whereas this is about default security groups. I therefore think the two should be kept separate.
The default security groups that Juju generates allow ssh access from any source.
If units are all deployed in a single space, this effectively exposes port 22 to whichever other instance has been deployed in the same network.
It would be beneficial to be able to limit the source to a configurable cidr range, perhaps as a model config option.
The objective of this bug report is similar to the one of LP#1321407, although that bug report is concerned with exposed ports, whereas this is about default security groups. I therefore think the two should be kept separate.