The web UI only showed VMs in the same location, but a backend check that the location matched was missing.