Skip to content

Limit Guest Network per project/account, etc. #10940

Closed

Description

@hosmir

As an Admin/Operator I would like to limit the number of Guest Networks a user can have.

In our multi-tenant environment, each Guest Network of type Shared gives the user VMs a public IP. And the option that already exists for limiting public IPs does not work for our use case because of our architecture.
I have implemented most of the code in a private branch and it is currently going through some internal testing. I would like to know if this is something you want implemented in the upstream branch so I can go ahead and create a PR for it.

Activity

  1. DaanHoogland commented on Jun 2, 2025

    @DaanHoogland
    Contributor

    @hosmir, on accounts you can set a limit to the number of networks they can create. If this is not the functionality you mean, then we are certainly interested in your proposal/code.

    Image

  2. weizhouapache commented on Jun 2, 2025

    @weizhouapache
    Member

    In our multi-tenant environment, each Guest Network of type Shared gives the user VMs a public IP. And the option that already exists for limiting public IPs does not work for our use case because of our architecture.

    @hosmir
    Is it a typo, did you mean Isolated network (not Shared) ?

  3. hosmir commented on Jun 3, 2025

    @hosmir
    Author

    @hosmir, on accounts you can set a limit to the number of networks they can create. If this is not the functionality you mean, then we are certainly interested in your proposal/code.

    Image

    Tenants are free to create and use many networks if they wish, only the public IPs (that they attain via assigning a shared guest network to their VMs) should be limited.

    I will tidy up the code in the coming days and since I implemented the code for v4.17.2, I will need to adapt it to the main branch from upstream. Will open a PR the soonest I can.
    Thanks

  4. hosmir commented on Jun 3, 2025

    @hosmir
    Author

    In our multi-tenant environment, each Guest Network of type Shared gives the user VMs a public IP. And the option that already exists for limiting public IPs does not work for our use case because of our architecture.

    @hosmir Is it a typo, did you mean Isolated network (not Shared) ?

    No, I actually meant shared networks, since they are how tenants can assign a public IP to their VMs from pools of predefined shared networks.

  5. locked and limited conversation to collaborators on Jul 7, 2025
  6. converted this issue into a discussion #11149 on Jul 7, 2025
  7. added this to the unplanned milestone on Sep 20, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions