From d50bff95bc1ec2b9a42f040e4165832b95a7b87a Mon Sep 17 00:00:00 2001
From: Andrea Dell'Amico <andrea.dellamico@isti.cnr.it>
Date: Mon, 22 Apr 2024 15:22:41 +0200
Subject: [PATCH] See #26245. security group for the port in the timescaledb
 network.

---
 .../d4s-production/liferay/terraform.tfstate  | 57 ++++++++++++++++++-
 openstack-tf/modules/liferay/liferay.tf       |  7 +++
 2 files changed, 63 insertions(+), 1 deletion(-)

diff --git a/openstack-tf/d4s-production/liferay/terraform.tfstate b/openstack-tf/d4s-production/liferay/terraform.tfstate
index 90c04b1..76b94fb 100644
--- a/openstack-tf/d4s-production/liferay/terraform.tfstate
+++ b/openstack-tf/d4s-production/liferay/terraform.tfstate
@@ -1,7 +1,7 @@
 {
   "version": 4,
   "terraform_version": "1.7.5",
-  "serial": 44,
+  "serial": 47,
   "lineage": "1ad5c30b-f952-53b5-f9cd-fe7cb4117b8b",
   "outputs": {
     "liferay_data": {
@@ -2241,6 +2241,61 @@
         }
       ]
     },
+    {
+      "module": "module.liferay",
+      "mode": "managed",
+      "type": "openstack_networking_port_secgroup_associate_v2",
+      "name": "liferay_timescaledb_port_secgroup",
+      "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
+      "instances": [
+        {
+          "index_key": 0,
+          "schema_version": 0,
+          "attributes": {
+            "all_security_group_ids": [
+              "167e4897-f776-4cbd-986f-77313aa68af2"
+            ],
+            "enforce": false,
+            "id": "a5aca9d1-2f25-4aaa-8603-40b66145742b",
+            "port_id": "a5aca9d1-2f25-4aaa-8603-40b66145742b",
+            "region": "isti_area_pi_1",
+            "security_group_ids": [
+              "167e4897-f776-4cbd-986f-77313aa68af2"
+            ]
+          },
+          "sensitive_attributes": [],
+          "private": "bnVsbA==",
+          "dependencies": [
+            "module.liferay.data.terraform_remote_state.privnet_dns_router",
+            "module.liferay.data.terraform_remote_state.timescaledb",
+            "module.liferay.openstack_networking_port_v2.liferay_timescaledb_port"
+          ]
+        },
+        {
+          "index_key": 1,
+          "schema_version": 0,
+          "attributes": {
+            "all_security_group_ids": [
+              "167e4897-f776-4cbd-986f-77313aa68af2"
+            ],
+            "enforce": false,
+            "id": "42a21092-180d-4fee-abdb-c482bccfc83a",
+            "port_id": "42a21092-180d-4fee-abdb-c482bccfc83a",
+            "region": "isti_area_pi_1",
+            "security_group_ids": [
+              "167e4897-f776-4cbd-986f-77313aa68af2"
+            ]
+          },
+          "sensitive_attributes": [],
+          "private": "bnVsbA==",
+          "dependencies": [
+            "module.liferay.data.terraform_remote_state.privnet_dns_router",
+            "module.liferay.data.terraform_remote_state.timescaledb",
+            "module.liferay.openstack_networking_port_v2.liferay_timescaledb_port"
+          ]
+        }
+      ]
+    },
     {
       "module": "module.liferay",
       "mode": "managed",
diff --git a/openstack-tf/modules/liferay/liferay.tf b/openstack-tf/modules/liferay/liferay.tf
index e980766..537173f 100644
--- a/openstack-tf/modules/liferay/liferay.tf
+++ b/openstack-tf/modules/liferay/liferay.tf
@@ -132,6 +132,13 @@ resource "openstack_networking_port_v2" "liferay_timescaledb_port" {
   }
 }
 
+resource "openstack_networking_port_secgroup_associate_v2" "liferay_timescaledb_port_secgroup" {
+  count              = var.liferay_data.vm_count
+  port_id            = openstack_networking_port_v2.liferay_timescaledb_port[count.index].id
+  security_group_ids = [data.terraform_remote_state.privnet_dns_router.outputs.nfs_share_no_ingress_secgroup_id]
+}
+
+
 resource "openstack_compute_interface_attach_v2" "timescaledb_port_to_liferay" {
   count       = var.liferay_data.vm_count
   instance_id = openstack_compute_instance_v2.liferay[count.index].id