From 1605e689a8dd5414434c678f0416b46029bf3a21 Mon Sep 17 00:00:00 2001 From: ioito Date: Tue, 30 Jul 2019 11:44:48 +0800 Subject: [PATCH] fix: add priority for openstack secgroup rule priority --- pkg/multicloud/openstack/securitygroup.go | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/pkg/multicloud/openstack/securitygroup.go b/pkg/multicloud/openstack/securitygroup.go index 683b58d160..d61c4783b2 100644 --- a/pkg/multicloud/openstack/securitygroup.go +++ b/pkg/multicloud/openstack/securitygroup.go @@ -186,9 +186,16 @@ func (secgrouprule *SSecurityGroupRule) toRules() []secrules.SecurityRule { func (secgroup *SSecurityGroup) GetRules() ([]secrules.SecurityRule, error) { rules := []secrules.SecurityRule{} + priority := 100 for _, rule := range secgroup.SecurityGroupRules { + if priority < 2 { + priority = 2 + } subRules := rule.toRules() - rules = append(rules, subRules...) + for _, subRule := range subRules { + subRule.Priority = priority + rules = append(rules, subRule) + } } defaultDenyRule := secrules.MustParseSecurityRule("out:deny any") defaultDenyRule.Priority = 1