Failure with "openstack-service-builder : setup a router"

[valerytschopp]

Creating the site router fails with a strange error:

...
TASK [openstack-service-builder : setup a router] ******************************************************************************************
failed: [os.hub-staging] (item={u'cidr': [u'192.168.1.0/24'], u'name': u'hub-staging'}) => {"changed": false, "item": {"cidr": ["192.168.1.0/24"], "name": "hub-staging"}, "msg": "Error creating router hub-staging_router: Client Error for url: https://api.zhdk.cloud.switch.ch:9696/v2.0/routers.json, {\"NeutronError\": {\"message\": \"(rule:create_router and (rule:create_router:external_gateway_info and (rule:create_router:external_gateway_info:network_id and rule:create_router:external_gateway_info:enable_snat))) on {u'external_gateway_info': {u'network_id': u'3cc83f7d-9119-475b-ba17-f3510c7902e8', u'enable_snat': True}, 'availability_zone_hints': [], 'ha': <neutron_lib.constants.Sentinel object at 0x7f92380be6d0>, 'description': '', u'admin_state_up': True, 'tenant_id': u'eb45f81cc32143f280a45a2c5039a079', 'distributed': <neutron_lib.constants.Sentinel object at 0x7f92380be6d0>, 'flavor_id': <neutron_lib.constants.Sentinel object at 0x7f92380be6d0>, 'project_id': u'eb45f81cc32143f280a45a2c5039a079', u'name': u'hub-staging_router'} by {'domain': None, 'project_name': u'********', 'tenant_name': u'********', 'project_domain': None, 'timestamp': '2018-10-03 09:29:26.262599', 'auth_token': 'e42b062d1db14ba297d68d71aa75e2f2', 'resource_uuid': None, 'is_admin': False, 'user': u'4f375405b0c04e4d8c02541ed40d5af5', 'tenant': u'eb45f81cc32143f280a45a2c5039a079', 'read_only': False, 'project_id': u'eb45f81cc32143f280a45a2c5039a079', 'user_id': u'4f375405b0c04e4d8c02541ed40d5af5', 'show_deleted': False, 'roles': [u'_member_', u'heat_stack_owner'], 'user_identity': u'4f375405b0c04e4d8c02541ed40d5af5 eb45f81cc32143f280a45a2c5039a079 - - -', 'tenant_id': u'eb45f81cc32143f280a45a2c5039a079', 'is_admin_project': True, 'request_id': 'req-08b83e10-e724-41db-be54-91d66e44e3a4', 'user_domain': None, 'user_name': u'********'} disallowed by policy\", \"type\": \"PolicyNotAuthorized\", \"detail\": \"\"}}"}
...ignoring

TASK [openstack-service-builder : setup a security_group] **********************************************************************************
...