Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I see juju creates a new security group when we do a bootstrap, but this security group is so open that it allows all the machine inside the group to access all the ports.

Is it possible to create a restricted security group or is there an option/parameter in environment.yaml file to specify that?

share|improve this question

I found a way to do it

This can be solved by creating a security group earlier ( with whatever security policy we wish), so that juju can use the same security instead of creating one. Security group name should match the name that we specify in the environment.yaml file. For example , if we use the name "amazon", then the security group name should be "juju-amazon".

As zookeeper service ( bootstrap instance) is listening on the port 2181 for all the client request , we need to open 2181 port for the group.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.