Comment 5 for bug 1675486

Here's what neutron returns when it rejects a request to create a port on an external network:

INFO neutron.pecan_wsgi.hooks.translation [req-58fdb103-cd20-48c9-b73b-c9074061998c req-4d68df7e-e0fd-4b1e-9b57-733731123d46 demo demo] POST failed (client error): Tenant 7c60976c662a414cb2661831ff41ee30 not allowed to create port on this network
[...]
INFO neutron.wsgi [req-58fdb103-cd20-48c9-b73b-c9074061998c req-4d68df7e-e0fd-4b1e-9b57-733731123d46 demo demo] 127.0.0.1 "POST /v2.0/ports HTTP/1.1" status: 403 len: 360 time: 0.1582518

I've started a thread on the ML about the possibility of removing the nova-compute 'network:attach_external_network' policy check here:

http://lists.openstack.org/pipermail/openstack-discuss/2021-March/020876.html