Bug 1862260

Summary: Default job templates are not locked
Product: Red Hat Satellite Reporter: James Jeffers <jjeffers>
Component: Remote ExecutionAssignee: Leos Stejskal <lstejska>
Status: CLOSED ERRATA QA Contact: Peter Ondrejka <pondrejk>
Severity: unspecified Docs Contact:
Priority: high    
Version: 6.7.0CC: aruzicka, egolov, inecas, lstejska, mhulan, ofedoren, pcreech
Target Milestone: 6.7.4Keywords: Regression, Triaged
Target Release: Unused   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: tfm-rubygem-foreman_remote_execution-2.0.10.2-1,tfm-rubygem-katello-3.14.0.26-1,tfm-rubygem-foreman_ansible-4.0.3.8-1,tfm-rubygem-foreman_openscap-2.0.2.1-1 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1830253
: 1874153 (view as bug list) Environment:
Last Closed: 2020-09-30 13:12:11 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
locked templates none

Comment 2 Bryan Kearney 2020-07-31 00:05:03 UTC
Moving this bug to POST for triage into Satellite since the upstream issue https://projects.theforeman.org/issues/29956 has been resolved.

Comment 5 Peter Ondrejka 2020-08-19 13:37:04 UTC
Created attachment 1711885 [details]
locked templates

Comment 6 Peter Ondrejka 2020-08-19 13:39:04 UTC
Checked on Satellite 6.7.3, seems that Ansible related job templates didn't get the default lock (see attachment), in the 6.8 version of this BZ, these same templates received the fix

Comment 7 Leos Stejskal 2020-08-25 06:53:02 UTC
In Ansible plugin templates are locked since version 5.1.0,
this version has been added to Satellite in 6.8.0/5.0 snap (see https://ohsnap.sat.engineering.redhat.com/streams/6.8/releases/6.8.0/snaps/5.0/packages).

Comment 8 Marek Hulan 2020-08-26 08:59:46 UTC
This BZ is a clone for 6.7.z, more specifically for 6.7.3, we need to backport the patch that locks templates to the version we ship in this release.

Comment 10 James Jeffers 2020-08-27 14:41:46 UTC
We're going to postpone this for 6.7.4, which will also include the fix for Ansible templates.

Comment 13 James Jeffers 2020-08-31 11:44:39 UTC
Peter, 

Per email discussion with Sudhir, QE wanted to mark this as verified, and so the recommendation was to put ON_QA so that could be done.

James

Comment 16 Peter Ondrejka 2020-09-07 06:57:51 UTC
In the 6.8 version of this BZ I noticed that the Run OpenSCAP scans template stays unlocked, it will probably need to be fixed also here.

Comment 17 James Jeffers 2020-09-08 12:50:33 UTC
Moved this to modified per https://bugzilla.redhat.com/show_bug.cgi?id=1873477#c3

Comment 19 Peter Ondrejka 2020-09-14 11:38:33 UTC
Checked on Satellite 6.7.4, default lock missing on the "Run OpenSCAP scans", we'll need to get in https://github.com/theforeman/foreman-packaging/pull/5773

Comment 20 Peter Ondrejka 2020-09-14 11:42:08 UTC
Or better to say, this needs pulling in https://github.com/theforeman/foreman_openscap/pull/438

Comment 23 Peter Ondrejka 2020-09-24 14:28:35 UTC
Verified on Satellite 6.7.4-2

Comment 28 errata-xmlrpc 2020-09-30 13:12:11 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: Satellite 6.7.4 Async Bug Fix Update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2020:4127