Comment 3 for bug 1432742

Revision history for this message
Miguel Alejandro Cantu (miguel-cantu) wrote :

Hey miguelgrinberg. It was my understanding that in the ref arch, internal APIs shouldn't be accessible from VMs. Is it okay for VMs to have access to the internal openstack APIs?

kevin-cater: Yes! That would definitely fix the issue. This might be a better approach since there is no way of telling if a deployment will be using Heat resources that require access to the heat APIs. The user can just add the override if need be.
It's ultimately up to you guys if you want to keep the default the same, or change it. I talked to James D. and walked away with the understanding that VMs shouldn't have access to internal APIs. I could have been mistaken, however :)