Novnc doesn't work when using nodegroups

[Nikita Koshikov]

Steps to reproduce:

1) Create env with 2 nodegroups
2) Assign 1+ controllers to non-default nodegroup
3) Assign 1+ computes to default nodegroup
4) Deploy changes

With such setup novnc is not working. This is because we have deployment/puppet/osnailyfacter/modular/firewall/firewall.pp with:

class { 'openstack::firewall' :
  nova_vnc_ip_range => hiera('management_network_range'),
}

management_network_range - resolves only to 1(default) nodegroup network and connections from 2 and 3 dropped by firewall on compute.
We need either specify the list of all management networks or use '0.0.0.0'.

Bug is valid for 7.0 and 6.1.

[Nikita Koshikov (nkoshikov)]

Please note, controller here is detached component from standart MOS controller. VIP and haproxy located on separate role and shares 1 nodegroup.

[Matthew Mosesohn (raytrac3r)]

What's the progress on this?

[Matthew Mosesohn (raytrac3r)]

Will we backport this for 7.0?

[Valeriy Saharov (vsakharov)]

I have some problems for reproducing this issue. Work in progress.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/238426

[Valeriy Saharov (vsakharov)]

The bug associated with the multirack system that are not supported in 6.1 and 7.0.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/238426
Committed: https://git.openstack.org/cgit/openstack/fuel-library/commit/?id=87c4bf3baf4304a8cb5f4297111a4ef641c5f67b
Submitter: Jenkins
Branch: master

commit 87c4bf3baf4304a8cb5f4297111a4ef641c5f67b
Author: Valeriy Sakharov <email address hidden>
Date: Wed Oct 21 15:01:07 2015 +0300

    Fix access to vnc for multirack

    Add routable networks from all nodegroups to novnc_range parameter in the firewall.

    Closes-bug: #1500494

    Change-Id: I2fa5394d6ba67d2d6807a5a85d271309964ff405

[Dmitry Belyaninov (dbelyaninov)]

Verified on ISO #521
[root@nailgun ~]# cat /etc/fuel/version.yaml
VERSION:
  feature_groups:
    - mirantis
  production: "docker"
  release: "8.0"
  api: "1.0"
  build_number: "521"
  build_id: "521"
  fuel-nailgun_sha: "bae6d0062e0825d81409a04bcb4979302f8c65ea"
  python-fuelclient_sha: "4f234669cfe88a9406f4e438b1e1f74f1ef484a5"
  fuel-agent_sha: "658be72c4b42d3e1436b86ac4567ab914bfb451b"
  fuel-nailgun-agent_sha: "b2bb466fd5bd92da614cdbd819d6999c510ebfb1"
  astute_sha: "b81577a5b7857c4be8748492bae1dec2fa89b446"
  fuel-library_sha: "29829b131ca802830bc5a9a131c83cd0f43f702b"
  fuel-ostf_sha: "7bcddf18020f2d94a553a441ff57dff9632865df"
  fuel-mirror_sha: "c25d8931e30322ecf43246c8a957e376259b685c"
  fuelmenu_sha: "e071216cb214e34b4d861478033425ee6a54a3be"
  shotgun_sha: "63645dea384a37dde5c01d4f8905566978e5d906"
  network-checker_sha: "a43cf96cd9532f10794dce736350bf5bed350e9d"
  fuel-upgrade_sha: "616a7490ec7199f69759e97e42f9b97dfc87e85b"
  fuelmain_sha: "a365f05b903368225da3fea9aa42afc1d50dc9b4"

Horizon console to VM works fine.