Bug 2090466

Summary:	Satellite does not follow http redirects received by the cdn URL while trying to load the list of Red Hat Repositories
Product:	Red Hat Satellite	Reporter:	Joniel Pasqualetto <jpasqual>
Component:	Repositories	Assignee:	Chris Roberts <chrobert>
Status:	ASSIGNED ---	QA Contact:	Satellite QE Team <sat-qe-bz-list>
Severity:	high	Docs Contact:
Priority:	high
Version:	6.10.5	CC:	ahumbe, chrobert, ehelms, iballou, paji, rkhadkik, saydas, sraut, wpinheir
Target Milestone:	Unspecified	Keywords:	Reopened, Triaged
Target Release:	Unused
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-06-13 19:37:04 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Joniel Pasqualetto 2022-05-25 19:53:55 UTC

Description of problem:

When loading the list of Red Hat Repositories (Content -> Red Hat Repositories), Satellite won't follow redirects.


Version-Release number of selected component (if applicable):


How reproducible:

Always, when the cdn url sends a redirect

Steps to Reproduce:
1. Modify the CDN url to http://cdn.redhat.com (note the HTTP, not HTTPS)
2. Go to Content -> Red Hat Repositories. Try expanding any repository know to have multiple options to be enabled. Nothing will be loaded.

Actual results:
Redirects are not followed and users can't enable repositories.

Expected results:
http redirects to be followed.

Additional info:

Comment 4 Partha Aji 2022-05-27 20:20:28 UTC

Connecting redmine issue https://projects.theforeman.org/issues/34983 from this bug

Comment 5 Bryan Kearney 2022-05-28 00:04:28 UTC

Upstream bug assigned to paji

Comment 6 Bryan Kearney 2022-05-28 00:04:30 UTC

Upstream bug assigned to paji

Comment 10 Chris Roberts 2022-06-13 19:37:04 UTC

Hi,

This BZ can be fixed by following the steps in the Red Hat KCS below:

https://access.redhat.com/solutions/6962982

Closing this as CLOSED-CURRENTRELEASE

Comment 13 Sayan Das 2023-02-13 15:29:05 UTC

Based on the discussion with the engineer from case 03426678, I am reopening this Bugzilla. 

Since this was never really fixed in the product but worked around, I believe we need more investigation to be done here. 

These are the questions raised by the case engineer to me :

A) Why 6.11 is working for the end-user but not 6.12 ? ( any specific change in katello is not allowing the workaround to do its job ?? )

B) Who is responsible for redirecting https://cdn.redhat.com to https://ru-by-exceptions.cdn.redhat.com ?

   --> If it's RedHat, then what is the exact necessity of the same?

           --> The RU-BY exceptions had ended quite some time back 


C) Is there a product-level permanent fix we can suggest to the customer?

D) If C is false then What sort of data would be required from the customer to investigate this issue going forward and find out a viable solution ?




-- Sayan

Comment 14 Sayan Das 2023-02-13 16:47:34 UTC

JFYI, As the end-user was not experiencing the exact same issue as before but rather, it seems like manifest certs are not allowing access to the content hosted in ru-by cdn mirror, we decided to treat it as simple "403 forbidden" scenario, and go for a manifest refresh.

I have additionally requested them to refresh the pulp repos in Library env i.e. foreman-rake katello:refresh_pulp_repo_details LIFECYCLE_ENVIRONMENT=Library 

Let's see if that results in any positive outcome ..

Comment 15 Bryan Kearney 2023-02-16 16:02:40 UTC

Upstream bug assigned to chrobert

Comment 16 Bryan Kearney 2023-02-16 16:02:43 UTC

Upstream bug assigned to chrobert