security group rule create doesn't allow protocol-less rules

Bug #1712242 reported by IWAMOTO Toshihiro on 2017-08-22
This bug affects 5 people
Affects Status Importance Assigned to Milestone
Fix Released
Daniel Speichert

Bug Description

$ openstack security group rule create --help

  --protocol <protocol>
                        IP protocol (ah, dccp, egp, esp, gre, icmp, igmp,
                        ipv6-encap, ipv6-frag, ipv6-icmp, ipv6-nonxt,
                        ipv6-opts, ipv6-route, ospf, pgm, rsvp, sctp, tcp,
                        udp, udplite, vrrp and integer representations
                        [0-255]; default: tcp)

A SG rule's protocol field is optional and can be left unspecified.
However, the CLI doesn't allow such a rule.

Daniel Speichert (dasp) on 2017-10-15
Changed in python-openstackclient:
assignee: nobody → Daniel Speichert (dasp)

Fix proposed to branch: master

Changed in python-openstackclient:
status: New → In Progress

Submitter: Zuul
Branch: master

commit 82f45d9bd203aee77914c1f9e300f7dbedf673c8
Author: Daniel Speichert <email address hidden>
Date: Sun Oct 15 16:35:37 2017 -0400

    Allow creating security rules without protocol

    In order to create a rule for any protocol, the client
    must not specify the protocol in the API call. This
    is currently impossible because protocol defaults to TCP.

    In order not to change the default behavior, a "new" protocol
    name is added: "any", which makes this CLI skip sending the
    protocol field altogether.

    Change-Id: I58853d3745f3631007e5e9780c0c5c2526b730a3
    Closes-Bug: 1712242

Changed in python-openstackclient:
status: In Progress → Fix Released

This issue was fixed in the openstack/python-openstackclient 3.13.0 release.

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Duplicates of this bug

Other bug subscribers