Fuel for OpenStack

Novnc doesn't work when using nodegroups

Bug #1500494 reported by Nikita Koshikov
16
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Fix Released
High
Valeriy Saharov
Fuel for OpenStack 8.0
6.1.x
Invalid
High
MOS Maintenance
Fuel for OpenStack 6.1-updates
7.0.x
Invalid
High
Valeriy Saharov
Fuel for OpenStack 7.0-updates

Bug Description

Steps to reproduce:

1) Create env with 2 nodegroups
2) Assign 1+ controllers to non-default nodegroup
3) Assign 1+ computes to default nodegroup
4) Deploy changes

With such setup novnc is not working. This is because we have deployment/puppet/osnailyfacter/modular/firewall/firewall.pp with:

class { 'openstack::firewall' :
  nova_vnc_ip_range => hiera('management_network_range'),
}

management_network_range - resolves only to 1(default) nodegroup network and connections from 2 and 3 dropped by firewall on compute.
We need either specify the list of all management networks or use '0.0.0.0'.

Bug is valid for 7.0 and 6.1.

See original description
Revision history for this message
Nikita Koshikov (nkoshikov) wrote :

Please note, controller here is detached component from standart MOS controller. VIP and haproxy located on separate role and shares 1 nodegroup.

Matthew Mosesohn (raytrac3r)
tags: added: feature-nodegroup
Revision history for this message
Matthew Mosesohn (raytrac3r) wrote :

What's the progress on this?

Revision history for this message
Matthew Mosesohn (raytrac3r) wrote :

Will we backport this for 7.0?

Dmitry Pyzhov (dpyzhov)
no longer affects: fuel/8.0.x
Sergey Vasilenko (xenolog)
Changed in fuel:
assignee: Sergey Vasilenko (xenolog) → Valeriy Saharov (vsakharov)
Valeriy Saharov (vsakharov)
Changed in fuel:
status: Confirmed → In Progress
Revision history for this message
Valeriy Saharov (vsakharov) wrote :

I have some problems for reproducing this issue. Work in progress.

tags: added: tricky
Aleksandr Didenko (adidenko)
description: updated
Dmitry Pyzhov (dpyzhov)
tags: added: area-library
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-library (master)

Fix proposed to branch: master
Review: https://review.openstack.org/238426

Revision history for this message
Valeriy Saharov (vsakharov) wrote :

The bug associated with the multirack system that are not supported in 6.1 and 7.0.

OpenStack Infra (hudson-openstack)
Changed in fuel:
assignee: Valeriy Saharov (vsakharov) → Dmitry Ilyin (idv1985)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (master)

Reviewed: https://review.openstack.org/238426
Committed: https://git.openstack.org/cgit/openstack/fuel-library/commit/?id=87c4bf3baf4304a8cb5f4297111a4ef641c5f67b
Submitter: Jenkins
Branch: master

commit 87c4bf3baf4304a8cb5f4297111a4ef641c5f67b
Author: Valeriy Sakharov <email address hidden>
Date: Wed Oct 21 15:01:07 2015 +0300

    Fix access to vnc for multirack

    Add routable networks from all nodegroups to novnc_range parameter in the firewall.

    Closes-bug: #1500494

    Change-Id: I2fa5394d6ba67d2d6807a5a85d271309964ff405

Changed in fuel:
status: In Progress → Fix Committed
Michael Polenchuk (mpolenchuk)
Changed in fuel:
assignee: Dmitry Ilyin (idv1985) → Valeriy Saharov (vsakharov)
Dmitry Belyaninov (dbelyaninov)
tags: added: on-verification
Revision history for this message
Dmitry Belyaninov (dbelyaninov) wrote :

Verified on ISO #521
[root@nailgun ~]# cat /etc/fuel/version.yaml
VERSION:
  feature_groups:
    - mirantis
  production: "docker"
  release: "8.0"
  api: "1.0"
  build_number: "521"
  build_id: "521"
  fuel-nailgun_sha: "bae6d0062e0825d81409a04bcb4979302f8c65ea"
  python-fuelclient_sha: "4f234669cfe88a9406f4e438b1e1f74f1ef484a5"
  fuel-agent_sha: "658be72c4b42d3e1436b86ac4567ab914bfb451b"
  fuel-nailgun-agent_sha: "b2bb466fd5bd92da614cdbd819d6999c510ebfb1"
  astute_sha: "b81577a5b7857c4be8748492bae1dec2fa89b446"
  fuel-library_sha: "29829b131ca802830bc5a9a131c83cd0f43f702b"
  fuel-ostf_sha: "7bcddf18020f2d94a553a441ff57dff9632865df"
  fuel-mirror_sha: "c25d8931e30322ecf43246c8a957e376259b685c"
  fuelmenu_sha: "e071216cb214e34b4d861478033425ee6a54a3be"
  shotgun_sha: "63645dea384a37dde5c01d4f8905566978e5d906"
  network-checker_sha: "a43cf96cd9532f10794dce736350bf5bed350e9d"
  fuel-upgrade_sha: "616a7490ec7199f69759e97e42f9b97dfc87e85b"
  fuelmain_sha: "a365f05b903368225da3fea9aa42afc1d50dc9b4"

Horizon console to VM works fine.

Changed in fuel:
status: Fix Committed → Fix Released
tags: removed: on-verification
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.