Unable to get Internet access on Openstack provider network using LXC containers

I’m using version 2.0.11 on LXD.
I have in two machines, in one of them one container named “controller” and in the other machine one container named “compute”. I follow official documentation of installation of OpenStack Pike. I can do everything, launch instances, create networks, all… Except I cannot ping provider network, also instances, so external (provider) network is not having Internet access.
Containers communicate between a GRE tunnel.

I think that it does not work because of the NIC I added for provider network. This is what I have.

Host : cat /etc/network/interfaces

auto lo
iface lo inet loopback

auto br0
iface br0 inet dhcp
bridge_ports enp9s0
bridge_stp off
bridge_fd 0
bridge_maxwait 0

I added NIC to container as:
lxc config device add controller eth10 nic name=eth10 nictype=bridge parent=br0

Container controller: cat /etc/network/interfaces

source /etc/network/interfaces.d/*.cfg

auto eth0
iface eth0 inet dhcp
###For provider Network put it as Openstack installation guide
auto eth10
iface eth10 inet manual
up ip link set dev $IFACE up
down ip link set dev $IFACE down

root@controller:~# ip netns
qdhcp-a67a6585-8f38-4187-9c44-ba9dba4d7fff (id: 2)
qdhcp-21ff85d9-6f97-4b20-925c-80cc8dc448b7 (id: 3)
qrouter-048133d0-406b-479b-89b4-64112a58fc06 (id: 1)

root@controller:~# ip netns exec qdhcp-21ff85d9-6f97-4b20-925c-80cc8dc448b7 ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: gre0@NONE: mtu 1476 qdisc noop state DOWN group default qlen 1000
link/gre 0.0.0.0 brd 0.0.0.0
3: gretap0@NONE: <BROADCAST,MULTICAST> mtu 1462 qdisc noop state DOWN group default qlen 1000
link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
4: erspan0@NONE: <BROADCAST,MULTICAST> mtu 1450 qdisc noop state DOWN group default qlen 1000
link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
5: ns-69ec4e46-43@if15: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether fa:16:3e:16:d5:37 brd ff:ff:ff:ff:ff:ff link-netnsid 0
inet 169.254.169.254/16 brd 169.254.255.255 scope global ns-69ec4e46-43
valid_lft forever preferred_lft forever
inet 203.0.113.101/24 brd 203.0.113.255 scope global ns-69ec4e46-43
valid_lft forever preferred_lft forever
inet6 fe80::f816:3eff:fe16:d537/64 scope link
valid_lft forever preferred_lft forever

This ping to itself works:
root@controller:~# ip netns exec qdhcp-21ff85d9-6f97-4b20-925c-80cc8dc448b7 ping 203.0.113.101

I can ping to router gateway (203.0.113.111) but cannot ping to external IP neither instances (203.0.113.108) using this qdhcp or qrouter.

More info. Last step of Veriy operation of this. (https://docs.openstack.org/install-guide/launch-instance-networks-selfservice.html#verify-operation)

root@controller:~# openstack port list --router router
±-------------------------------------±-----±------------------±-----------------------------------------------------------------------------±-------+
| ID | Name | MAC Address | Fixed IP Addresses | Status |
±-------------------------------------±-----±------------------±-----------------------------------------------------------------------------±-------+
| 40ea0018-b84f-4335-bde7-d8d06ef3f8fb | | fa:16:3e:f5:5f:3a | ip_address=‘203.0.113.111’, subnet_id=‘6dde20a2-7f3e-437f-a5c5-2129bc9239f9’ | ACTIVE |
| 43d7bfa6-2726-4d1d-b693-741fde8a8005 | | fa:16:3e:0d:60:9d | ip_address=‘172.16.1.1’, subnet_id=‘af85ef90-e2fc-49de-a41a-abede6a4444c’ | ACTIVE |
±-------------------------------------±-----±------------------±-----------------------------------------------------------------------------±-------+

root@controller:~# ping -c 4 203.0.113.111
PING 203.0.113.111 (203.0.113.111) 56(84) bytes of data.

— 203.0.113.111 ping statistics —
4 packets transmitted, 0 received, 100% packet loss, time 3061ms

Self-service network works. And NIC was added as provider, but this is internal so does not need internet.

As I said I think is caused because of the bridge nic I added for provider network due to all is working except external network.