Uploaded image for project: 'Red Hat OpenStack Services on OpenShift'
  1. Red Hat OpenStack Services on OpenShift
  2. OSPRH-26381

[Fwaas] Remove rule one from firewall group policy - it is not possible to remove only one

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • None
    • neutron-operator
    • None
    • Important

      To Reproduce Steps to reproduce the behavior:

      1. Create firewall group rule and  firewall group rule 
      ---------------------------------------------------------------------------------------------+
      | ID                                   | Name                 | Firewall Rules                                                                                                                                                                                                                                   |
      +--------------------------------------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
      | 0fff03a8-6399-4f17-bd6e-5b08a1a61d8d | fw_policy_test       | ['a76ca9e2-330a-43be-895e-628844a9ea78', 'f193cc8a-36e0-4cbd-b3e3-0b72237620bb', 'f7810b45-ab74-42d8-804b-6a13d6db4d9c']                                                                                                                         |
       
      1. Remove one rule from firewall group policy is not available. It only has the option "--no-firewall-rule " that  Remove all firewall rules from firewall policy.
      sh-5.1$ openstack firewall group policy set --help
      usage: openstack firewall group policy set [-h] [--description DESCRIPTION] [--audited | --no-audited] [--share | --no-share] [--name <name>] [--firewall-rule <firewall-rule>]
                                                 [--no-firewall-rule]
                                                 <firewall-policy>Set firewall policy propertiespositional arguments:
        <firewall-policy>
                              Firewall policy to update (name or ID)optional arguments:
        -h, --help            show this help message and exit
        --description DESCRIPTION
                              Description of the firewall policy
        --audited             Enable auditing for the policy
        --no-audited          Disable auditing for the policy
        --share               Share the firewall policy to be used in all projects (by default, it is restricted to be used by the current project).
        --no-share            Restrict use of the firewall policy to the current project
        --name <name>
                              Name for the firewall policy
        --firewall-rule <firewall-rule>
                              Firewall rule(s) to apply (name or ID)
        --no-firewall-rule    Remove all firewall rules from firewall policy This command is provided by the python-neutronclient plugin.
       

              skaplons@redhat.com Slawomir Kaplonski
              rh-ee-fyanac Fiorella Yanac
              rhos-dfg-networking-squad-neutron
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: