diff --git a/defaults/main.yml b/defaults/main.yml
index f80cfa1..94bfab9 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -163,6 +163,7 @@ trove_service_net_subnet_cidr: "192.168.20.0/24"
 trove_service_net_dhcp: "True"
 trove_service_net_allocation_pool_start: "192.168.20.100"
 trove_service_net_allocation_pool_end: "192.168.20.120"
+trove_service_net_endpoint_type: internal
 
 # RPC encryption keys
 # See the Trove documentation as to the significance of the rpc encryption keys
diff --git a/releasenotes/notes/service_net_endpoint_type-60dbb87c4f68403c.yaml b/releasenotes/notes/service_net_endpoint_type-60dbb87c4f68403c.yaml
new file mode 100644
index 0000000..659b4ab
--- /dev/null
+++ b/releasenotes/notes/service_net_endpoint_type-60dbb87c4f68403c.yaml
@@ -0,0 +1,7 @@
+---
+features:
+  - You can set the ``endpoint_type`` used when
+    creating the Trove service network by specifying
+    the ``trove_service_net_endpoint_type`` variable.
+    This will default to ``internal``. Other possible
+    options are ``public`` and ``admin``.
diff --git a/tasks/trove_service_network.yml b/tasks/trove_service_network.yml
index 7ed6386..3ef091a 100644
--- a/tasks/trove_service_network.yml
+++ b/tasks/trove_service_network.yml
@@ -37,6 +37,7 @@
       provider_network_type: "{{ trove_service_net_type }}"
       project: "{{ keystone_admin_tenant_id }}"
       wait: yes
+      endpoint_type: "{{ trove_service_net_endpoint_type }}"
     register: trove_network
     run_once: true
 
@@ -53,6 +54,7 @@
       enable_dhcp: "{{ trove_service_net_dhcp }}"
       project: "{{ keystone_admin_tenant_id }}"
       wait: yes
+      endpoint_type: "{{ trove_service_net_endpoint_type }}"
     register: subnet_create
     run_once: true
   # Block end