It was found that HAProxy statistics are non-authenticated over network. elements/haproxy/os-apply-config/etc/haproxy/haproxy.cfg: listen haproxy.stats :{{#stats.port}}{{stats.port}}{{/stats.port}}{{^stats.port}}1993{{/stats.port}}
Created openstack-tripleo-image-elements tracking bugs for this issue: Affects: fedora-all [bug 1332374]
issue solved in RHOSP current release - trackers filed for opensource projects