openstack
/
openstack
Code Issues Proposed changes

Update git submodules 

* Update neutron from branch 'master'
  - Merge "Switch isolated metadata proxy to bind to 169.254.169.254"
  - Switch isolated metadata proxy to bind to 169.254.169.254
    
    Currently the metadata proxy binds to default 0.0.0.0, which does not
    add any advantage (metadata requests are not sent to random IP
    addresses), and may allow access to cloud information from
    third parties.
    
    This changes the generated configuration to bind to METADATA_DEFAULT_IP
    address instead.
    
    This is not enabled in other metadata proxy configuration (in the L3
    agent), as this would require net.ipv4.ip_nonlocal_bind everywhere
    (currently only enabled for DVR) or transparent mode in haproxy (which
    requires net.ipv4.ip_nonlocal_bind anyway)
    
    Changed set_ip_nonlocal_bind_for_namespace() to support setting the
    value in both the given and root namespace correctly, since it was
    only used from inside the neutron codebase according to codesearch.
    
    Change-Id: I388391cf697dade1a163d15ab568b33134f7b2d9
    Co-Authored-By: Andrey Arapov <andrey.arapov@nixaid.com>
    Closes-Bug: #1745618
This commit is contained in:
Zuul 2019-02-05 13:51:37 +00:00 committed by Gerrit Code Review
parent fd3ae83e2a
commit 436c3a87db
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
neutron

@ -1 +1 @@
Subproject commit b86fa161edd1d1a9d20efbd52d922d5ba738b18d
Subproject commit 46dc30991a406d9d875614513b4eda5bdb4b231b