is sort of going to depend on Kolla's architecture in terms of what it is used for and how. The ironic_cleaning_network parameter just sets explicitly to ironic.conf's cleaning_network parameter.

From Ironic's point of view, a cleaning network should not be a tenant/project specific network. In theory, you can do this if you're using flat networking and the world is not going to implode, it is just not advisable if you are handing machines out to untrusted users.

Hope this helps,

-Julia