Recommendation: Provide access to all OpenStack Endpoint types
Cohesity recommends that you provide full access to all OpenStack endpoints to the NetBackup for OpenStack appliance to follow the OpenStack standards and best practices.
NetBackup for OpenStack generates its own endpoints as well. These endpoints point towards the NetBackup for OpenStack Appliance directly. This means that using those endpoints does not send the API calls towards the OpenStack Controller nodes first, but directly to the NetBackup for OpenStack virtual machine.
Following the OpenStack standards and best practices, it is therefore recommended to put the NetBackup for OpenStack endpoints on the same networks as the already existing OpenStack endpoints. This allows to extend the purpose of each endpoint type to the NetBackup for OpenStack service:
The public endpoint to be used by OpenStack users when using NetBackup for OpenStack CLI or API.
The internal endpoint to communicate with the OpenStack services.
The admin endpoint to use the required admin only APIs of Keystone.