Support for address-group extension
Having address-group and security-groups-remote-address-group would allow users to use address lists in security groups and firewall groups like so:
openstack address group create \
--description "test address group" \
--address 10.10.10.5/32 \
--address 192.168.100.0/24 \
test-ag
openstack security group create ag-test-sg
openstack security group rule create \
--ingress --protocol tcp --dst-port 22 \
--remote-address-group test-ag \
ag-test-sg
openstack security group rule list ag-test-sg --long
+-----------------+----------------------------------------------------------------------------------------------------------------------------------------------------------+
| Field | Value |
+-----------------+----------------------------------------------------------------------------------------------------------------------------------------------------------+
| created_at | 2026-11-04T22:38:21Z |
| description | ag-test-sg |
| id | ae8e7416-7f34-40ed-9244-b95da32e0715 |
| is_shared | False |
| name | ag-test-sg |
| project_id | c151a4e809ad4b33a9b1434632454ad8 |
| revision_number | 1 |
| rules | created_at='2026-11-04T22:38:21Z', direction='egress', ethertype='IPv6', id='0d66a044-ccc4-4e24-a3e7-89e4ff212f13', standard_attr_id='31028', |
| | updated_at='2026-11-04T22:38:21Z' |
| | created_at='2026-11-04T22:38:21Z', direction='egress', ethertype='IPv4', id='d915023a-c31a-440a-8fe0-ae736424234e', standard_attr_id='31031', |
| | updated_at='2026-11-04T22:38:21Z' |
| stateful | True |
| tags | [] |
| updated_at | 2026-11-04T22:38:21Z |
+-----------------+----------------------------------------------------------------------------------------------------------------------------------------------------------+
Status: Planned
Log in to comment and vote
No comments yet
Be the first to share your thoughts.