Comment 17 for bug 1563954

OSSA would only be if there's an actual patch we're backporting to "fix" this in existing supported releases. OSSN is more for "don't do this, or if you're going to then make sure you do it this way" sorts of issues.

It sounds like the thinking here is that this is and always was a feature whose use is discouraged unless you're actually coupling it with some other (external to Nova) filtering solution, but the documentation warning about it has gotten too weak in recent releases. If so, that's more OSSN territory (an article warning that if you're going to turn on proxy support for your metadata server then make sure you have some means of controlling its availability) in addition to shoring up the existing warnings in Nova itself.