Added list of security groups and updated the geoserver.tf

openstack-tf/d4s-dev/variables/variables-dev.tf

@@ -117,3 +117,29 @@ variable "orientdb_se_secgroup" {
 variable "postgresql_secgroup" {
   default = "PostgreSQL service"
 }
+
+#Added by Francesco
+variable "security_group_list" {
+  type = map(string)
+  default = {
+    postgreSQL                             = "PostgreSQL service"
+    acaland                                = "acaland's dev machine"
+    haproxy                                = "HAPROXY L7"
+    access_to_orientdb                     = "access_to_orientdb"
+    dataminer-publish                      = "dataminer-publish"
+    docker_swarm_NFS                       = "Docker Swarm NFS"
+    public_HTTPS                           = "Public HTTPS"
+    haproxy                                = "HAPROXY L7"
+    orientdb_internal_docker_traffic       = "orientdb_internal_docker_traffic"
+    limited_SSH_access                     = "Limited SSH access"
+    access_to_the_timescaledb_service      = "access_to_the_timescaledb_service"
+    docker_swarm                           = "Docker Swarm"
+    http_and_https_from_the_load_balancers = "http and https from the load balancers"
+    limited_HTTPS_access                   = "Limited HTTPS access"
+    mongo                                  = "mongo"
+    limited_SSH_access                     = "Limited SSH access"
+    default                                = "default"
+    cassandra                              = "Cassandra"
+    access_to_orientdb_se                  = "access_to_orientdb_se"
+  }
+}

openstack-tf/modules/geoserver/geoserver.tf

@@ -10,7 +10,7 @@ resource "openstack_compute_instance_v2" "geoserver" {
   availability_zone_hints = var.availability_zones_names.availability_zone_no_gpu
   flavor_name             = var.geoserver_basic.flavor
   key_pair                = var.ssh_key_file.name
-  security_groups         = [var.default_security_group_name]
+  security_groups         = [var.security_group_list.default, var.security_group_list.http_and_https_from_the_load_balancers]
   block_device {
     uuid                  = var.ubuntu_1804.uuid
     source_type           = "image"