How to allow VDC admin to create Virtual Network

Community Support
1

Hello,

I am using version 5.4.6 currently which have problem now where VDC admin is not allow to create its own Virtual Network.

Currently I have created a VDC which pre-allocate VNets as screen capture.

vdc-1
vdc-1.jpg958×531 48.6 KB

And created a Group with user admin inside.

group_list
group_list.jpg954×490 55.3 KB

This group is allow to use VDC resource.

Also created an ACL which I have already allow Group member to “use, manage,create, admin” - ID25

acl-1
acl-1.jpg952×698 77 KB

acl-2
acl-2.jpg967×426 56.1 KB

However, when login as VDC group admin. Create Virtual Networks still not allow.

group-admin-access
group-admin-access.jpg984×386 27.3 KB

Could you please advise how should solve this problem?

Thanks!

2

You need to enable it in the Sunstone yamls. Take a look at file /etc/one/sunstone-views/groupadmin.yaml.

3

Hi Tino, is it also possible to force VDC admin to create only specific type of network, eg 802.1q and preddefined physical interface?

1 Like
4

Hello,

Any details meaning for each parameters for groupadmin.yaml ?

I also read

but no much available information there.

Thanks!

5

That is currently not supported. Please open a feature request in GitHub to evaluate the use case.

6

Hello,

I faced the same behavior on same release and before opening a Feature request I checked here if somelse faced the same.
I added some “admin” rights for the Admin user. I added an ACL with ADMIN right for “CLUSTERS”.
I am not a big fan of this workaround as it means that an external user with admin rights must be cluster administrator to create a Virtual Network. While for me this should not be the case (I will open a feature request for this).
@machiasiaweb, can you check if adding some admin rights to this user unlock you situation ?

Thank you

Regards