Type="String",
)
)
# Define the instance security group, to allow:
# - SSH from our trusted network
# - ICMP from everywhere
security_group = template.add_resource(
neutron.SecurityGroup(
"OpenStackSecurityGroup",
description="Instance Security Group",
rules=[
neutron.SecurityGroupRule(
protocol="tcp",
port_range_min=22,
port_range_max=22,
remote_ip_prefix="192.168.1.0/24",
),
neutron.SecurityGroupRule(
protocol="icmp",
remote_ip_prefix="0.0.0.0/0",
),
],
)
)
openstack_instance = template.add_resource(
nova.Server(
"OpenStackInstance",
image="MyImage",
flavor="t1.micro",
# - SSH from our trusted network
# - HTTP from the security group used by our LBaaS
# - ICMP from everywhere
security_group = template.add_resource(
neutron.SecurityGroup(
"MySecurityGroup",
description="Instance Security Group",
rules=[
neutron.SecurityGroupRule(
protocol='tcp',
port_range_min=22,
port_range_max=22,
remote_ip_prefix="192.168.1.0/24",
),
neutron.SecurityGroupRule(
protocol='tcp',
port_range_min=80,
port_range_max=80,
remote_mode="remote_group_id",
remote_group_id="faf49966-ffc2-4602-84e9-917ae2ce7b89"
),
neutron.SecurityGroupRule(
protocol='icmp',
remote_ip_prefix="0.0.0.0/0",
),
]
)
)
# Define our launch configuration (AWS compatibility resource)
launch_config = template.add_resource(autoscaling.LaunchConfiguration(