Comment 1 for bug 1693257

The cloudpipe API extension was deprecated in Ocata:

https://developer.openstack.org/api-ref/compute/#cloudpipe-os-cloudpipe-deprecated

And it was actually removed in the 16.0.0 Pike release:

https://specs.openstack.org/openstack/nova-specs/specs/pike/approved/remove-nova-cert.html

Therefore I don't see much point in fixing this, the code is literally gone on the master branch (Pike). We could try to fix the policy defaults in Ocata but I'm not sure that it's worth it, plus policy can be modified/overridden in a deployment.