<div dir="ltr">That works. But not seeing the dashboard . Getting "resource not found". I am using osp 8.<div><br></div><div>-Paras.</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, May 17, 2016 at 1:52 PM, Dan Sneddon <span dir="ltr"><<a href="mailto:dsneddon@redhat.com" target="_blank">dsneddon@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 05/16/2016 11:13 AM, Paras pradhan wrote:<br>
> How do we access the undercloud dashboard?<br>
><br>
><br>
</span><span class="">> _______________________________________________<br>
> rdo-list mailing list<br>
> <a href="mailto:rdo-list@redhat.com">rdo-list@redhat.com</a><br>
> <a href="https://www.redhat.com/mailman/listinfo/rdo-list" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/rdo-list</a><br>
><br>
> To unsubscribe: <a href="mailto:rdo-list-unsubscribe@redhat.com">rdo-list-unsubscribe@redhat.com</a><br>
><br>
<br>
</span>The undercloud dashboard listens on port 8080 on the control plane<br>
interface (br-ctlplane). This IP may not be reachable remotely,<br>
especially if the default route on the Undercloud is a different<br>
interface, or if the Undercloud is actually a VM running in a virt-host.<br>
<br>
In those cases, I usually set up local port forwarding via SSH. This<br>
allows me to access the Horizon dashboard, and provides encryption so<br>
the username/password doesn't traverse the wire in cleartext (when not<br>
running SSL on the Undercloud).<br>
<br>
ssh -L 9000:<br-ctlplane_ip>:8080 stack@undercloud_external_ip<br>
<br>
Then you can connect to <a href="http://localhost:9000/" rel="noreferrer" target="_blank">http://localhost:9000/</a> to access the dashboard.<br>
<br>
You can even nest these if you are using a virtualized Undercloud:<br>
<br>
>From virt-host:<br>
ssh -L 9500:<br-ctlplane_ip>:8080 stack@undercloud_external_ip<br>
<br>
>From your workstation:<br>
ssh -L 9000:localhost:9500 stack@virt-host<br>
<br>
Then when you connect to port 9000 locally it gets forwarded to port<br>
9050 on the virt-host, which is a tunnel to port 8080 on the Undercloud VM.<br>
<br>
You can add "-nNT" before the -L in the ssh commands if you just want<br>
to create the tunnel without connecting to a remote shell when you<br>
issue the ssh command.<br>
<br>
The other (potentially less secure) option is to reconfigure Apache on<br>
the Undercloud to listen on all interfaces, and then connect directly<br>
to the IP on the Undercloud interface with the default route. A similar<br>
option is to disable reverse path filtering [1], and then connect<br>
directly to the br-ctlplane interface. This will only work if the<br>
Undercloud is directly reachable (usually not possible if using a VM<br>
undercloud). These methods should only be used in production when SSL<br>
is enabled, because the passwords shouldn't be sent in the clear.<br>
<br>
[1] - <a href="https://access.redhat.com/solutions/53031" rel="noreferrer" target="_blank">https://access.redhat.com/solutions/53031</a><br>
<span class="HOEnZb"><font color="#888888">--<br>
Dan Sneddon | Principal OpenStack Engineer<br>
<a href="mailto:dsneddon@redhat.com">dsneddon@redhat.com</a> | <a href="http://redhat.com/openstack" rel="noreferrer" target="_blank">redhat.com/openstack</a><br>
<a href="tel:650.254.4025" value="+16502544025">650.254.4025</a> | dsneddon:irc @dxs:twitter<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
_______________________________________________<br>
rdo-list mailing list<br>
<a href="mailto:rdo-list@redhat.com">rdo-list@redhat.com</a><br>
<a href="https://www.redhat.com/mailman/listinfo/rdo-list" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/rdo-list</a><br>
<br>
To unsubscribe: <a href="mailto:rdo-list-unsubscribe@redhat.com">rdo-list-unsubscribe@redhat.com</a><br>
</div></div></blockquote></div><br></div>