Traffic to internal VIP can go through proxy

[Pierre Riteau]

When running API requests from a host configured with kayobe, traffic destined for the internal VIP is sent via the default proxy.

This can be a security issue if not using TLS as the proxy will be able to intercept the traffic. This is considered a minor issue as traffic between containers will not use the proxy by default.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/kayobe/+/922787
Committed: https://opendev.org/openstack/kayobe/commit/6fb47e2193d912f85c977923ba0e06aea9d6c689
Submitter: "Zuul (22348)"
Branch: master

commit 6fb47e2193d912f85c977923ba0e06aea9d6c689
Author: Michal Nasiadka <email address hidden>
Date: Wed Jun 26 09:58:16 2024 +0200

    Add internal VIP address to no_proxy

    Change-Id: I7a9aa9abf611cdaa47cc91f40a6753f23a7f187e
    Closes-Bug: #2087556

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/2024.1
Review: https://review.opendev.org/c/openstack/kayobe/+/934729

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/2023.2
Review: https://review.opendev.org/c/openstack/kayobe/+/934730

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/2023.1
Review: https://review.opendev.org/c/openstack/kayobe/+/934731

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/kayobe/+/934729
Committed: https://opendev.org/openstack/kayobe/commit/4e07e042b74ba6c97ea921987021cf9030aac0ba
Submitter: "Zuul (22348)"
Branch: stable/2024.1

commit 4e07e042b74ba6c97ea921987021cf9030aac0ba
Author: Michal Nasiadka <email address hidden>
Date: Wed Jun 26 09:58:16 2024 +0200

    Add internal VIP address to no_proxy

    Change-Id: I7a9aa9abf611cdaa47cc91f40a6753f23a7f187e
    Closes-Bug: #2087556
    (cherry picked from commit 6fb47e2193d912f85c977923ba0e06aea9d6c689)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/kayobe/+/934730
Committed: https://opendev.org/openstack/kayobe/commit/715b4b93f87cc5ea733868b5036852513a638dcf
Submitter: "Zuul (22348)"
Branch: stable/2023.2

commit 715b4b93f87cc5ea733868b5036852513a638dcf
Author: Michal Nasiadka <email address hidden>
Date: Wed Jun 26 09:58:16 2024 +0200

    Add internal VIP address to no_proxy

    Change-Id: I7a9aa9abf611cdaa47cc91f40a6753f23a7f187e
    Closes-Bug: #2087556
    (cherry picked from commit 6fb47e2193d912f85c977923ba0e06aea9d6c689)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/kayobe/+/934731
Committed: https://opendev.org/openstack/kayobe/commit/d182f3344dd4654af3935e84221b22364ac08472
Submitter: "Zuul (22348)"
Branch: stable/2023.1

commit d182f3344dd4654af3935e84221b22364ac08472
Author: Michal Nasiadka <email address hidden>
Date: Wed Jun 26 09:58:16 2024 +0200

    Add internal VIP address to no_proxy

    Change-Id: I7a9aa9abf611cdaa47cc91f40a6753f23a7f187e
    Closes-Bug: #2087556
    (cherry picked from commit 6fb47e2193d912f85c977923ba0e06aea9d6c689)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/kayobe 17.0.0.0rc1 release candidate.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/kayobe 2023.1-eom release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/kayobe 15.6.0 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/kayobe 16.3.0 release.