openstack team mailing list archive

[David McNally <dave.mcnally@xxxxxx>]

Hi,

We've run into an issue where we can add only a single rule per 
source-group to a security group. e.g:

euca-authorize --protocol icmp -t -1:-1 --source-group groupB groupA

will add a security rule as expected but if we cannot add a second rule 
to groupA with groupB as the source e.g.:

euca-authorize --protocol tcp --port-range 22 --source-group groupB groupA
ApiError: This rule already exists in group ert2

I can see where this is happening in the code and I was wondering if 
this behavior is by design or if it is intended to change in a future 
release?

Thanks,

Dave