supplement open--port/close-port with ensure-these-and-only-these-ports?

[Aaron Bentley]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



On 2014-11-01 12:58 PM, John Meinel wrote:
> I believe there is already "opened-ports" to tell you what ports 
> Juju is currently tracking.

Kapil says that's in 1.21 and I was using released juju, so I didn't
see that.  Cool.

For stateful charms, I think opened-ports is the second-best solution.
 It's possible for a charm to handle ports in a stateful way, but it's
more work than ensure-these-and-only-these-ports, and I think it's
work that any stateful charm would need to repeat.

> As for the rest, "open-port" only takes a single port (or range), 
> which means that if you wanted only 80 and 8080 open, you would 
> need a different syntax. (something that lets you specify multiple 
> ports/ranges to be opened).

That's what I meant by "open-port would need to accept multiple ports,
not just ranges"

Aaron
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJUV5MpAAoJEK84cMOcf+9hXC4H+wYiz3XmR8k1d6WO+ZOMPjUb
p/HbvK2yqhxllzxBndmgLiZCWMEAg5au3TBueJwqN4YQHUV13M725gcIEtaPlyyG
bzY3EYlpgvtch4RSNOeGyNZt8UqrFpnvuo73sVKEU9JfLE0d+8pO37YfO8tElWwm
U1hKM1wJHvtVVo3Xl7M6x/pb7Gwija7QaTf6qUOIim5WN6xqZTRT4zAlC4R9jUdt
52zHW9woIhM3iMKL2iFIkYrSm7DV8jCK0e4yP1yMQtipFVul15iVcZ5Elx37nbmU
jDbXajMBrFPhqs4M/KrzrSBym/O/jbF917Lz6g76Kvu43sOo/wvBqwEnqpW6ldc=
=gpIq
-----END PGP SIGNATURE-----