According to rhn-engineering-beagles, the topology diagram for the RHOSO DNS service (designate) used here, has the following problems:

1. The only thing that can be reached by internal network in RHOSO is the API.
2. There is no HAProxy.
3. Redis and MariaDB are not accessible by the internalapi either.
4. The controller host and role hosts are no longer relevant, because they are all openshift workers.
5. Unsure about neutron dnsmasq. There isn't a direct path from the tenant network to anything on the internal api network anymore.