This affects our installation as well, and will affect anyone running an OpenStack environment in which the control plane doesn't have outbound network connectivity to hit public endpoints, and instead relies on internal endpoints on a shared network. This is a somewhat common security control to implement, and the change the original bug reporter has proposed seems both effective and narrowly-scoped so that it should be a fairly simple thing to review. Can the proposed fix be merged?
This affects our installation as well, and will affect anyone running an OpenStack environment in which the control plane doesn't have outbound network connectivity to hit public endpoints, and instead relies on internal endpoints on a shared network. This is a somewhat common security control to implement, and the change the original bug reporter has proposed seems both effective and narrowly-scoped so that it should be a fairly simple thing to review. Can the proposed fix be merged?