In Openstack, as a user, how can I list or see the admin-created routers?

Peter

4/12/24, 9:52 AM

Using OpenStack-ansible Yoga : as a user in OpenStack I can see all admin-created provider networks in Horizon Network-Topology but I cannot see any admin-created routers, not in the Horizon interface and not in the cli interface. Consequence is that, as a user, my network topology graph does not show me to which provider network I am connected too as there are no routers visible. The connection is there because I can reach the internet and, logged in as admin, I can see the interface from my private network hooked up to a router, which in turn is connected to a provider network. Even with the flag "shared" set to off these provider networks are visible. Routers do not even seem to have a flag "shared". How can I make these routers read-only visible for users ? All is working fine in our OpenStack cloud since Ussuri but this issue I cannot seem to solve.

1 + 0

openstack

openstack-neutron

Score:0

Server

Peter

4/13/24, 1:36 PM

Further looking into this, I think the answer lies in RBAC policies in OpenStack (see Horizon, Admin, Network, RBAC Policies) . The provider networks are visible to users because of RBAC policies that allow this. When you create a provider network and tag it as --external an RBAC policy is created with the action "access_as_external" and target_project_id the wildcard *, so every project can see these networks. It looks to me that for subnet and routers there are not even objects available for network RBAC policies.

+ 0

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: In Openstack, as a user, how can I list or see the admin-created routers?

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.