tebib security-group

Generated from the CLI's own command tree. Run tebib security-group --help for the same text in your terminal.

Security groups: stateful firewalls on VM network interfaces.

Commands

tebib security-group create

Create a security group (no inbound rules yet: everything inbound is denied).

tebib security-group create [OPTIONS] NAME

Argument	Description
NAME required	Group name, unique in the project.

Option	Value	Description
--vpc required	str	VPC ID.
--description	str	Description.
--tag	KEY=VALUE (repeatable)	Tag as KEY=VALUE; repeat for more tags.
--project, -p	str	Project ID (default: from the profile).
--wait	flag	Wait until the resource is ready (or gone, for deletes).
--timeout	float range	Seconds to wait with --wait. Default: 600.
--output, -o	table | json | yaml	Output format.

tebib security-group delete

Delete a security group.

tebib security-group delete [OPTIONS] ID

Argument	Description
ID required	Security group ID (sg-...).

Option	Value	Description
--yes, -y	flag	Don't ask for confirmation.
--wait	flag	Wait until the resource is ready (or gone, for deletes).
--timeout	float range	Seconds to wait with --wait. Default: 600.
--project, -p	str	Project ID (default: from the profile).

tebib security-group list

List the project's security groups.

tebib security-group list [OPTIONS]

Option	Value	Description
--project, -p	str	Project ID (default: from the profile).
--limit	int range	Show at most this many items.
--output, -o	table | json | yaml	Output format.

tebib security-group show

Show one security group.

tebib security-group show [OPTIONS] ID

Argument	Description
ID required	Security group ID (sg-...).

Option	Value	Description
--project, -p	str	Project ID (default: from the profile).
--output, -o	table | json | yaml	Output format.

tebib security-group update

Change a security group's description or tags.

tebib security-group update [OPTIONS] ID

Argument	Description
ID required	Security group ID (sg-...).

Option	Value	Description
--description	str	New description.
--tag	KEY=VALUE (repeatable)	Replace ALL tags (KEY=VALUE, repeatable).
--clear-tags	flag	Remove all tags.
--project, -p	str	Project ID (default: from the profile).
--output, -o	table | json | yaml	Output format.

tebib security-group rule

Rules of a security group (inbound is denied unless a rule allows it).

tebib security-group rule add

Allow traffic, e.g. rule add sg-... --protocol tcp --port 22 --cidr 203.0.113.0/24.

tebib security-group rule add [OPTIONS] SG_ID

Argument	Description
SG_ID required	Security group ID (sg-...).

Option	Value	Description
--protocol required	str	tcp, udp, icmp or all.
--direction	str	ingress (inbound) or egress. Default: ingress.
--port	str	Port or range for tcp/udp, e.g. 22 or 8000-8100.
--cidr	str	Remote range, e.g. 0.0.0.0/0 or 2001:db8::/32.
--group	str	Remote security group instead of a range (sg-...).
--ip-version	str	ipv4 or ipv6 (needed with --group; otherwise taken from --cidr).
--description	str	Why the rule exists.
--project, -p	str	Project ID (default: from the profile).
--wait	flag	Wait until the resource is ready (or gone, for deletes).
--timeout	float range	Seconds to wait with --wait. Default: 300.
--output, -o	table | json | yaml	Output format.

tebib security-group rule remove

Remove a rule (traffic it allowed is denied again).

tebib security-group rule remove [OPTIONS] SG_ID RULE_ID

Argument	Description
SG_ID required	Security group ID (sg-...).
RULE_ID required	Rule ID (sgr-...).

Option	Value	Description
--project, -p	str	Project ID (default: from the profile).
--wait	flag	Wait until the resource is ready (or gone, for deletes).
--timeout	float range	Seconds to wait with --wait. Default: 300.
--output, -o	table | json | yaml	Output format.