Organize rules into firewall group policies

Create firewall group policies to manage and order collections of firewall rules.

Before you begin

  • You have the oc command line tool installed on your workstation.
  • You are logged on to a workstation that has access to the RHOSO control plane as a user with cluster-admin privileges.

Procedure

  1. Access the remote shell for the OpenStackClient pod from your workstation:
    $ oc rsh openstackclient
  2. Create the firewall group policy:
    $ openstack firewall group policy create --firewall-rule <rule-id> --name my-policy
    Note

    You can add multiple firewall rules to a firewall policy by using multiple iterations of the --firewall-rule argument. The order of rules in a policy is significant.

  3. Exit the openstackclient pod:
    $ exit