Skip to content

Expose all ports as an exosphere default security group rule

cartoloupe requested to merge 129-expose-all-ports into master

Addresses step 1 of #129:

  1. We can expose all ports and protocols
    • MVP solution
    • Fairly easy to code, just need to ensure existing "exosphere" security groups on existing projects get the new rules(s)
    • There is precedent (DigitalOcean does this)
    • BUT not the most secure, relies on host firewall on instance

This MR also breaks out the SecurityGroupRule type into its own file, which seemed like a natural first step to implementing default rules, requesting creating them, and checking to see if they already exists amongst a received list of rules.

How to Test

(Please describe how to exercise these changes in the application)

  • Test 1: creating a new project will create the 4 default rules of exosphere
  • Test 2: retrieving an existing project with the previous 3 default rules, will update the project by adding the new 4th rule (exposing all ports)

Screenshots

(If visual changes are introduced, show what they look like) n/a

Addresses step 1 of #129

Edited by cartoloupe

Merge request reports