[RFE]: Provider network creation for non admins

[Gergely Csatari]

In several cases the cloud admin and network admin of a cloud are different entities, therefore it should be possible that non-(cloud)admin users can also create provider networks. To make it configurable probably a policy based control would be required.

One specific case is in the NVF universe where VNF-s often use provider networks due to their special networking requirements, the cloud is administered by the telecom network operator while the VNF (a group of VM-s, let's say) is deployed by a VNFM what should not have admin rights.
A more detailed description of the NFV case is described in Chapter 2.4 of the netready requirements document [1].

[1]: http://artifacts.opnfv.org/netready/colorado/docs/requirements/index.html

[Doug Wiegley (dougwig)]

I think this is already possible via policy.json, isn't it?

[Gergely Csatari (gergely-csatari)]

According to my knowledge currently only administrators can manage provider network. OpenStack Networking Guide is also stating the same [1].

[1]: http://docs.openstack.org/newton/networking-guide/scenario-provider-ovs.html

[Gergely Csatari (gergely-csatari)]

Now looking into this a bit more deeply it seems that @dougwig is correct. However the default setting is that only the admins can create provider networks, it is possible to change these default values.
The relevant policy.json parameters are: "create_network:provider:network_type",
 "create_network:provider:physical_network" and
 "create_network:provider:segmentation_id".

OpenStack networking guide [1] is not correct.

[1]: http://docs.openstack.org/newton/networking-guide/scenario-provider-ovs.html

[Launchpad Janitor (janitor)]

[Expired for neutron because there has been no activity for 60 days.]