We have moved away from the "nova compute" string substitution part of this issue but we do still use it for keystone ports iirc.
I think we could safely (with documentation) drop or greatly limit this feature (I agree it's dumb) in Juno. OSSN for stable/* releases.
We could *possibly* also check the option secret flag before trying to do the substitution (which might be backportable).
We have moved away from the "nova compute" string substitution part of this issue but we do still use it for keystone ports iirc.
I think we could safely (with documentation) drop or greatly limit this feature (I agree it's dumb) in Juno. OSSN for stable/* releases.
We could *possibly* also check the option secret flag before trying to do the substitution (which might be backportable).