VNC console via horizon directs to wrong URL

[Vyacheslav Struk]

How to reproduce:
Install fuel, deploy openstack and spin-up a VM.
Go to Horizon via https, instances, node console.
VNC console opening fails with:

--
Server not found
Firefox can't find the server at public.fuel.local.
--

Link "Click here to show only console" also provides wrong url:
https://public.fuel.local:6080/vnc_auto.html?token=<TOKEN_ID_HERE>

I've tried to substitute "public.fuel.local" with the horizon's IP. Everything works fine in this case.

VERSION:
  feature_groups:
    - mirantis
  production: "docker"
  release: "7.0"
  openstack_version: "2015.1.0-7.0"
  api: "1.0"
  build_number: "288"
  build_id: "288"
  nailgun_sha: "93477f9b42c5a5e0506248659f40bebc9ac23943"
  python-fuelclient_sha: "1ce8ecd8beb640f2f62f73435f4e18d1469979ac"
  fuel-agent_sha: "082a47bf014002e515001be05f99040437281a2d"
  fuel-nailgun-agent_sha: "d7027952870a35db8dc52f185bb1158cdd3d1ebd"
  astute_sha: "a717657232721a7fafc67ff5e1c696c9dbeb0b95"
  fuel-library_sha: "121016a09b0e889994118aa3ea42fa67eabb8f25"
  fuel-ostf_sha: "1f08e6e71021179b9881a824d9c999957fcc7045"
  fuelmain_sha: "6b83d6a6a75bf7bca3177fcf63b2eebbf1ad0a85"

[Timur Nurlygayanov (tnurlygayanov)]

It is not a bug, it is incorrect deployment, user should configure the correct host name for OpenStack public endpoints

[Timur Nurlygayanov (tnurlygayanov)]

It should work fine if you will add mapping between <public cloud IP> and hostname 'public.fuel.local'.

Status changed to Invalid.

[Eugene Nikanorov (enikanorov)]

I can't disagree more, product deploys a cloud by clicking a button in the Fuel dashboard.
Does it work after standard 1-click deployment? No.
This is clearly a UX bug, and very annoying one, both for dev-tests and end-users.

This must either be configurable or just more smart.
It's insane that the very basic feature doesn't work out of the box (especially if it worked previously)

[Stanislaw Bogatkin (sbogatkin)]

Eugene, at 7.0 release cycle decision was taken to enable HTTPS by default for all public services. As a result, you should use local DNS resolver for your client (it is your client which tried to connect via VNC, not horizon itself) or you should set up your environment settings another way (e.g. disable SSL or put IP address into DNS hostname field in SSL tab).

[Andrew Woodward (xarses)]

This is a UX bug. because we are setting it to a default value that is not correct for any end user, they must specify the value. However they are not forced to set the value. The default value must be blank and required. CI testing fixtures should be updated to provide a valid value for CI

[Stanislaw Bogatkin (sbogatkin)]

As long as we targeted to production - it should be fqdn, not blank. We need to do it 2 ways:

1. Create article about it in docs, so I set it to doc-team first. @fuel-docs, please, set "Related-Bug", not "Closed-Bug" in your fix commit.
2. We need a way to said to user that if he uses TLS - he should setup his own local DNS resolver which could resolve hostnames of TLS-wrapped endpoints to IP addresses of these endpoints (or user must use IP addresses with disabled https hostname checking everywhere). @fuel-ui team may tell something about creating a such way.

[Eugene Nikanorov (enikanorov)]

This bug affects those who don't use TLS.
The setting should not be required if TLS is not used, and by default it should be placeholder for VIP IP.
User should be notified what IP is VIP's or deployment engine should fill it when deployment starts.

[Stanislaw Bogatkin (sbogatkin)]

Hi Eugene,
Is there any proof of it? We don't use fqdn any way but when TLS is used.

[Jarvis (jarvis-zhou)]

I have encountered above this same problem, the VM console still can not work when change the 'public.fuel.lock' to VIP, the error information as below, any suggestion or solution to solve it?
--
Server not found
Firefox can't find the server at public.fuel.local.
--

[Jarvis (jarvis-zhou)]

Upload the setup and error image

[Jarvis (jarvis-zhou)]

network topology

[Andrew Woodward (xarses)]

Why hasn't this been addressed?

This is not a documentation bug, action must be take to address it properly in the users workflow. This breaks heat and any other service that returns URI constructed by with the endpoint URL

[Stanislaw Bogatkin (sbogatkin)]

Guys, I asked a question about it previously. If you have this problem after enabling TLS - this is predictable. If not - tell about it.

As I understand now, we won't change default behavior for this now. If you have another information - please, tell here about it and reopen this bug.

[Stanislaw Bogatkin (sbogatkin)]

Update - I will talk with UI team about this bug. As I know - they working on adding warning about TLS setting. If there is a bug about it - I'll remark this one as duplicate.

[Andrew Woodward (xarses)]

Guys, the default name for the certificate is invalid for the user, and can't be updated by fuel when the user want's to change it. this is not medium, or won't fix. It must be addressed. This is high from UX criteria.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/249693

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/249693
Committed: https://git.openstack.org/cgit/openstack/fuel-web/commit/?id=f1879e8974f18733badd4daefb85eb3439f00ac9
Submitter: Jenkins
Branch: master

commit f1879e8974f18733badd4daefb85eb3439f00ac9
Author: Stanislaw Bogatkin <email address hidden>
Date: Wed Nov 25 13:19:51 2015 +0300

    Disable TLS by default

    Allow deploy without TLS by default and force user enable
    and configure it if she needed to use secure connections
    to public OpenStack endpoints.

    Change-Id: I1a5603b172ac77389423c7de8c22ddaa69d87abb
    Closes-Bug: #1495466

[Dmitriy Kruglov (dkruglov)]

Verified on MOS 8.0, build 212. The issue is not reproduced.

ISO info:
VERSION:
  feature_groups:
    - mirantis
  production: "docker"
  release: "8.0"
  openstack_version: "2015.1.0-8.0"
  api: "1.0"
  build_number: "212"
  build_id: "212"
  fuel-nailgun_sha: "13d1800be2452bd297555eedf051bda469b5663b"
  python-fuelclient_sha: "4f9a873b1ae68271bb848a1145b3cf912a176f4b"
  fuel-agent_sha: "f0e09fa7a30b5ab87e901601bfb6c1e339a6bdaa"
  fuel-nailgun-agent_sha: "b56f832abc18aee9a8c603fd6cc2055c5f4287bc"
  astute_sha: "d2c1b401816c6f0341902272f37018b9cec3c775"
  fuel-library_sha: "c892d2919620947225687ccde63d0e038784f0a2"
  fuel-ostf_sha: "5cf8c484a9a4f45f353468438cf98f1b5a5c5dfb"
  fuel-createmirror_sha: "9b335c8d551c87d788166947cb7ed519757881e8"
  fuelmenu_sha: "9627849843e84b7f01c44bd79898a8d62d96ce66"
  shotgun_sha: "34a081508b603723e14f9415a62373be39f3685f"
  network-checker_sha: "2c62cd52655ea6456ff6294fd63f18d6ea54fe38"
  fuel-upgrade_sha: "1e894e26d4e1423a9b0d66abd6a79505f4175ff6"
  fuelmain_sha: "daed38102b6074393821d675e3d7d866fcdb3da5"

[Dmitry Pyzhov (dpyzhov)]

Fix reverted: https://review.openstack.org/#/c/250812/

[Dmitry Pyzhov (dpyzhov)]

Fix reverted because system tests are not ready for this change

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/250812
Committed: https://git.openstack.org/cgit/openstack/fuel-web/commit/?id=d72787e3032250748060204a85a2c4fe0b578d31
Submitter: Jenkins
Branch: master

commit d72787e3032250748060204a85a2c4fe0b578d31
Author: Nastya Urlapova <email address hidden>
Date: Fri Nov 27 13:30:32 2015 +0000

    Revert "Disable TLS by default"

    This reverts commit f1879e8974f18733badd4daefb85eb3439f00ac9.

    Closes-bug: #1520495
    Related-bug: #1495466

    Change-Id: Ia29bbf146e9149a738488f2d1a0e2e93f6f4b47b

[Stanislaw Bogatkin (sbogatkin)]

Then I kindly ask QA team solve problem with tests and then reassign this bug to me again.

[Alexander Kurenyshev (akurenyshev)]

We've solved a problem from our side. Reassigned to Stas

[Stanislaw Bogatkin (sbogatkin)]

Addressed by https://review.openstack.org/#/c/260961/1

[Vitaly Kramskikh (vkramskikh)]

Fixed by https://review.openstack.org/#/c/251311/

[Vladimir (vushakov)]

Verified on
VERSION:
  feature_groups:
    - mirantis
  production: "docker"
  release: "8.0"
  api: "1.0"
  build_number: "496"
  build_id: "496"
  fuel-nailgun_sha: "934c2d11b234193c6ac8e41cd1388df0ed3583e0"
  python-fuelclient_sha: "4f234669cfe88a9406f4e438b1e1f74f1ef484a5"
  fuel-agent_sha: "e40bcfbb1f5518d7a464cc330909cf09b84e7c20"
  fuel-nailgun-agent_sha: "b2bb466fd5bd92da614cdbd819d6999c510ebfb1"
  astute_sha: "b81577a5b7857c4be8748492bae1dec2fa89b446"
  fuel-library_sha: "b91e96e848057be4acadd10c2b55a6529387fe51"
  fuel-ostf_sha: "ab5fd151fc6c1aa0b35bc2023631b1f4836ecd61"
  fuel-mirror_sha: "351d568fa3b3e4dd062054b91d766aa54d379867"
  fuelmenu_sha: "234cb4cbb30fbd2df00f388c28f31606d9cae15f"
  shotgun_sha: "63645dea384a37dde5c01d4f8905566978e5d906"
  network-checker_sha: "a43cf96cd9532f10794dce736350bf5bed350e9d"
  fuel-upgrade_sha: "616a7490ec7199f69759e97e42f9b97dfc87e85b"
  fuelmain_sha: "6b993b3004e8d97d840b672d6c1d44c320975cd9"