Prevent vm creation directly to provider network
I have Openstack Mitaka installed on Ubuntu 16.04. Installation was done mostly according to the offical installation guide for Ubuntu.
I have internal network with private ip addresses and the provider network that uses public IPs.
When users of non-admin project create new vms on Horizon they can create vms to both private and provider network.
Instead I would like to allow vm creation only to private network and allow using public IPs only by setting them as floating IPs.
Is limitation like this possible? If it is possible can it be done? I have looked trough the policy.json files of Nova and Neutron but I could not find setting for this.
You mean external network as provider network?
Please go to Admin System > Networks > edit the public network > uncheck the shared option > save. Hope this helps.
Yes,this is exactly what I was looking for. Thanks.