Bernard Cafarelli 13d23ba363 Switch isolated metadata proxy to bind to 169.254.169.254 ... Currently the metadata proxy binds to default 0.0.0.0, which does not add any advantage (metadata requests are not sent to random IP addresses), and may allow access to cloud information from third parties. This changes the generated configuration to bind to METADATA_DEFAULT_IP address instead. This is not enabled in other metadata proxy configuration (in the L3 agent), as this would require net.ipv4.ip_nonlocal_bind everywhere (currently only enabled for DVR) or transparent mode in haproxy (which requires net.ipv4.ip_nonlocal_bind anyway) Changed set_ip_nonlocal_bind_for_namespace() to support setting the value in both the given and root namespace correctly, since it was only used from inside the neutron codebase according to codesearch. Change-Id: I388391cf697dade1a163d15ab568b33134f7b2d9 Co-Authored-By: Andrey Arapov <andrey.arapov@nixaid.com> Closes-Bug: #1745618 (cherry picked from commit 6124f60297)		2019-02-12 10:30:47 +00:00
..
__init__.py	Empty files should not contain copyright or license	2014-10-20 00:50:32 +00:00
agent.py	Allow Ipv6 addresses for nova_metadata_host	2018-10-13 07:16:55 +00:00
driver.py	Switch isolated metadata proxy to bind to 169.254.169.254	2019-02-12 10:30:47 +00:00