For services that use swift, such as cinder and glance, the config of these services should rely upon the catalog to provide a URL to reach the swift endpoint. However due to wanting to avoid having traffic hit any upstream routers, an entry in /etc/hosts for the swift FQDN should resolve to the haproxy internal VIP, or whatever it is we have for swift.
End goal should be NO ip addresses in config files, NO ip addresses in the catalog, and services hitting swift as "locally" as possible.