Comment 17 for bug 1916926

Revision history for this message
Dan Smith (danms) wrote : Re: Glance leaks namespace existence to unauthorized users

The draft also looks good to me. I haven't actually deployed with that policy snippet to check it for typos, but it looks right to me.

We _are_ currently planning to make the policy default changes in Wallaby, but that hasn't happened yet (and the gate is currently busy for all and wedged for some projects).

My recommendation is that we go ahead and make this public and send the note. For all released versions, the note and suggested policy changes are the important and actionable thing. We'll follow up and try to get the policy defaults change agreed-to and merged for Wallaby, which will be much easier when this is public, as it will require either tempest or devstack changes to land before any policy change.

Sound okay?