openstack/openstack-manuals
Code Issues Proposed changes

Merge "changes to section_cli_nova_manage_projects_security"

Browse Source
This commit is contained in:
Jenkins 2014-04-22 05:49:10 +00:00 committed by Gerrit Code Review
commit 939449b27a
1 changed files with 12 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
doc/user-guide-admin/section_cli_nova_manage_projects_security.xml
View File

@ -6,7 +6,7 @@
<?dbhtml stop-chunking?> <?dbhtml stop-chunking?>
<title>Manage project security</title> <title>Manage project security</title>
<para>Security groups are sets of IP filter rules that are applied <para>Security groups are sets of IP filter rules that are applied
to all project instances, and which define networking access to all project instances, which define networking access
to the instance. Group rules are project specific; project to the instance. Group rules are project specific; project
members can edit the default rules for their group and add new members can edit the default rules for their group and add new
rule sets.</para> rule sets.</para>
@ -22,7 +22,7 @@
</note> </note>
<para>You can use the <code>allow_same_net_traffic</code> option <para>You can use the <code>allow_same_net_traffic</code> option
in the <filename>/etc/nova/nova.conf</filename> file to in the <filename>/etc/nova/nova.conf</filename> file to
globally control whether the rules applies to hosts which globally control whether the rules apply to hosts which
share a network.</para> share a network.</para>
<para>If set to:</para> <para>If set to:</para>
<itemizedlist> <itemizedlist>
@ -50,12 +50,12 @@
<procedure> <procedure>
<title>List and view current security groups</title> <title>List and view current security groups</title>
<para>From the command line you can get a list of security <para>From the command line you can get a list of security
groups for the project you're acting in using the nova groups for the project, using the nova
command:</para> command:</para>
<step> <step>
<para>Ensure your system variables are set for the user <para>Ensure your system variables are set for the user
and tenant for which you are checking security group and tenant for which you are checking security group
rules. For example:</para> rules for. For example:</para>
<programlisting language="bash">export OS_USERNAME=demo00 <programlisting language="bash">export OS_USERNAME=demo00
export OS_TENANT_NAME=tenant01</programlisting> export OS_TENANT_NAME=tenant01</programlisting>
</step> </step>
@ -83,7 +83,7 @@ export OS_TENANT_NAME=tenant01</programlisting>
+-------------+-----------+---------+-----------+--------------+ </computeroutput></screen> +-------------+-----------+---------+-----------+--------------+ </computeroutput></screen>
<para>These rules are allow type rules as the default is <para>These rules are allow type rules as the default is
deny. The first column is the IP protocol (one of deny. The first column is the IP protocol (one of
icmp, tcp, or udp) the second and third columns icmp, tcp, or udp). The second and third columns
specify the affected port range. The third column specify the affected port range. The third column
specifies the IP range in CIDR format. This example specifies the IP range in CIDR format. This example
shows the full port range for all protocols allowed shows the full port range for all protocols allowed
@ -101,7 +101,7 @@ export OS_TENANT_NAME=tenant01</programlisting>
<step> <step>
<para>Ensure your system variables are set for the user <para>Ensure your system variables are set for the user
and tenant for which you are checking security group and tenant for which you are checking security group
rules.</para> rules for.</para>
</step> </step>
<step> <step>
<para>Add the new security group, as follows:</para> <para>Add the new security group, as follows:</para>
@ -166,7 +166,7 @@ export OS_TENANT_NAME=tenant01</programlisting>
<step> <step>
<para>Ensure your system variables are set for the user <para>Ensure your system variables are set for the user
and tenant for which you are deleting a security and tenant for which you are deleting a security
group.</para> group for.</para>
</step> </step>
<step> <step>
<para>Delete the new security group, as follows:</para> <para>Delete the new security group, as follows:</para>
@ -187,7 +187,7 @@ export OS_TENANT_NAME=tenant01</programlisting>
<step> <step>
<para>Make sure to set the system variables for the user <para>Make sure to set the system variables for the user
and tenant for which you are deleting a security and tenant for which you are deleting a security
group.</para> group for.</para>
</step> </step>
<step> <step>
<para>Add a source group, as follows:</para> <para>Add a source group, as follows:</para>