create "ALL ICMP" sec-group

playbooks/hosts/fed-cloud09.cloud.fedoraproject.org.yml

@@ -909,6 +909,33 @@
       - scratch
       - transient
 
+  - name: "Create 'ALL ICMP' security group"
+    neutron_sec_group:
+      login_username: "admin"
+      login_password: "{{ ADMIN_PASS }}"
+      login_tenant_name: "admin"
+      auth_url: "https://{{controller_hostname}}:35357/v2.0"
+      state: "present"
+      name: 'all-icmp-{{item}}'
+      description: "allow all ICMP traffic"
+      tenant_name: "{{item}}"
+      rules:
+        - direction: "ingress"
+          ethertype: "IPv4"
+          protocol: "icmp"
+          remote_ip_prefix: "0.0.0.0/0"
+    with_items:
+      - cloudintern
+      - cloudsig
+      - copr
+      - coprdev
+      - infrastructure
+      - persistent
+      - pythonbots
+      - qa
+      - scratch
+      - transient
+
   # Update quota for Copr
   #   SEE:
   #   nova quota-defaults