Open Stack

On Tue, Dec 17, 2013 at 10:37:05AM +0100, Yolanda Robla wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hi
> I just wanted to raise a new feature proposal request we are
> interested in. We are interested in sending additional API calls in
> headers, in each openstack component.
> A sample code i created (using keystone as target) is showed on that
> link: https://review.openstack.org/#/c/61128/
> 
> It relies on a new section in config files called extra_headers, where
> we can provide a set of key-value keypairs, and that will be sent in
> the headers of each API response.
> 
> We want to use that to be able to send the distribution used for
> Openstack deployment, but could be used for other generic purposes.
> Headers could also be disabled if not necessary.

Ok, I'll bite and ask the obvious question.  Why?

IMO you need a solid technical justification for this, backed up by real
use-cases, and I don't see any in the bug.

In general, I think leaking information about the platform a service is
running on is bad, particularly when it provides no value to users, so -1
on this from me.

Steve