Add TLS to the kibana service

[Jeffrey Zhang]

kibana auth is introduce in https://bugs.launchpad.net/kolla/+bug/1556487.

We need add TLS support for kibana, in this way, it will protect the plain credential when login.

[Dave McCowan (dave-mccowan)]

This is harder than it looks. Since Kibana is a web application that returns URLs in response bodies, to support TLS those URLs need to be rewritten with https://. We'll need to use a front end like apache or nginx to to do that.

[shake.chen (shake-chen)]

seem horizon also need it.

[Steven Dake (sdake)]

Dave,

There are two parts to this. One is TLS of the kibana service, and one is encrypting the plaintext password passed over the wire. We can enable TLS in kibana config directly. Would that work to trigger the plaintext password to be encrypted? Then it would be a matter of setting the tls config bigs in kibana without the need for an nginx proxy.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/306302

[OpenStack Infra (hudson-openstack)]

Change abandoned by Steven Dake (<email address hidden>) on branch: master
Review: https://review.openstack.org/306302
Reason: Dave sorted this out much more nicely :)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/306571
Committed: https://git.openstack.org/cgit/openstack/kolla/commit/?id=4c8227ec8bb58d0259f04e26137f9312eecabd5c
Submitter: Jenkins
Branch: master

commit 4c8227ec8bb58d0259f04e26137f9312eecabd5c
Author: Dave McCowan <email address hidden>
Date: Tue Apr 12 00:58:56 2016 -0400

    Add TLS to Kibana Web Interface

    Use HAProxy to terminate a TLS connection on port 5601 for the
    Kibana dashboard when TLS is enabled for Kolla. x-forwarded-for
    and x-forwarded-proto headers are set to give Kibana the info it
    needs to write returned URLs.

    Change-Id: I03a2dd3a8e2513d38281b30bf4bae6449fec0316
    Closes-bug: #1566117

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/306582
Committed: https://git.openstack.org/cgit/openstack/kolla/commit/?id=74a148705f8899b9ffdfa1d1d7aa5e067dfeaeb7
Submitter: Jenkins
Branch: stable/mitaka

commit 74a148705f8899b9ffdfa1d1d7aa5e067dfeaeb7
Author: Dave McCowan <email address hidden>
Date: Tue Apr 12 00:58:56 2016 -0400

    Add TLS to Kibana Web Interface

    Use HAProxy to terminate a TLS connection on port 5601 for the
    Kibana dashboard when TLS is enabled for Kolla. x-forwarded-for
    and x-forwarded-proto headers are set to give Kibana the info it
    needs to write returned URLs.

    Change-Id: I03a2dd3a8e2513d38281b30bf4bae6449fec0316
    Closes-bug: #1566117

[Davanum Srinivas (DIMS) (dims-v)]

This issue was fixed in the openstack/kolla 2.0.0.0rc4 release candidate.

[Doug Hellmann (doug-hellmann)]

This issue was fixed in the openstack/kolla 2.0.0 release.

[Doug Hellmann (doug-hellmann)]

This issue was fixed in the openstack/kolla 1.1.0 release.

[Doug Hellmann (doug-hellmann)]

This issue was fixed in the openstack/kolla 3.0.0.0b1 development milestone.