Bug 1115896

Summary:	Novnc should be set up with https
Product:	Red Hat OpenStack	Reporter:	Julie Pichon <jpichon>
Component:	openstack-packstack	Assignee:	Gaël Chamoulaud <gchamoul>
Status:	CLOSED ERRATA	QA Contact:	Ido Ovadia <iovadia>
Severity:	unspecified	Docs Contact:
Priority:	medium
Version:	5.0 (RHEL 7)	CC:	aortega, athomas, derekh, gchamoul, ichavero, iovadia, mmagr, nbarcet, sgordon, yeylon
Target Milestone:	z5	Keywords:	ZStream
Target Release:	5.0 (RHEL 7)
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	openstack-packstack-2014.1.1-0.47.dev1288.el7ost	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:
Clones:	1256878 (view as bug list)		Environment:
Last Closed:	2015-09-10 11:36:23 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1256878

Description Julie Pichon 2014-07-03 09:53:58 UTC

Description of problem:
Nova novnc isn't set up to use https, which can cause issues for example when Horizon is set up to use SSL (this causes bug 1102660).

When I set CONFIG_HORIZON_SSL=y in Packstack only Horizon gets set up with SSL, novnc doesn't. This causes the console to not be displayed when looking at an instance's details. This only happens when Horizon is on SSL and novnc without. Once I set up Nova to provide the VNC console with SSL (updating the baseurl etc in /etc/nova/nova.conf), it gets displayed correctly in Horizon.

Version-Release number of selected component (if applicable):
openstack-packstack-2014.1.1-0.13.dev1068 (from the original bug, but I was able to reproduce this with a more recent release a few weeks ago)

How reproducible:
100%

Steps to Reproduce:
1. Set CONFIG_HORIZON_SSL=y
2. Browse to: https://<FQDN>/dashboard/project/instances/<INSTANCE_UUID>/

Actual results:
3. The console doesn't display

Expected results:
3. The console should display, and will if it is set to https


Additional info:
Rather than changing the component for bug 1102660, I thought it'd be easier to open a new bug to make the actual issue clearer rather than lost in the history.

Comment 2 Gaël Chamoulaud 2014-07-22 20:59:31 UTC

*** Bug 1116903 has been marked as a duplicate of this bug. ***

Comment 6 Ido Ovadia 2014-09-21 14:34:26 UTC

Failed QA
=========

The console doesn't display

openstack-packstack-puppet-2014.1.1-0.41.dev1251.el7ost.noarch

Comment 7 Stephen Gordon 2014-09-24 20:17:05 UTC

Moving to A2 unless this is a regression?

Comment 9 Julie Pichon 2014-09-24 23:19:57 UTC

Agreed, this is not a regression.

Comment 11 Ido Ovadia 2014-10-30 13:56:29 UTC

The bug reproduced on:
openstack-packstack-puppet-2014.2-0.4.dev1266.g63d9c50.el7.centos.noarch

Aditional info:
===============
When changing the URL from 
https://<FQDN>/dashboard/project/instances/<INSTANCE_UUID>/ 
to
http://<FQDN>/dashboard/project/instances/<INSTANCE_UUID>/
the console is opend. 

Is it additional bug? a security bug?

Comment 15 Ido Ovadia 2015-03-30 13:36:31 UTC

Failed QA
=========

The console doesn't display

Failed to connect to server (code: 1006)

Comment 17 Ivan Chavero 2015-08-13 01:02:37 UTC


-- 
Fedora Bugzappers volunteer triage team
https://fedoraproject.org/wiki/BugZappers

Comment 19 Ido Ovadia 2015-09-02 14:31:13 UTC

Verified
========
openstack-packstack-2014.1.1-0.48.dev1289.el7ost.noarch

Comment 21 errata-xmlrpc 2015-09-10 11:36:23 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2015-1746.html