Bug 2188380

Summary:	[RFE] Switching on SCA should not give hosts access to new custom repositories
Product:	Red Hat Satellite	Reporter:	Jeremy Lenz <jlenz>
Component:	Subscription Management	Assignee:	Jeremy Lenz <jlenz>
Status:	CLOSED ERRATA	QA Contact:	Cole Higgins <chiggins>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	6.12.0	CC:	bdm, juwatts, osousa
Target Milestone:	6.13.2	Keywords:	FutureFeature
Target Release:	Unused
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	tfm-rubygem-katello-4.7.0.28-1	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-07-12 15:37:22 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Jeremy Lenz 2023-04-20 14:46:09 UTC

For Satellite versions 6.13 and older, and upstream Katello versions 4.8 and older, custom products will still be enabled by default. In these older versions, turning on SCA would mean that your hosts will suddenly get access to all custom products, even those that you hadn't attached a subscription for. This is unwanted behavior.

With this change, turning on SCA will also run a Dynflow task that adds "disabled" content overrides to your hosts and activation keys, for any content for which you don't have a subscription.

The effect of this is that once SCA is turned on, your hosts will have access to the same repositories as before, and won't suddenly get access to all custom products.

For newer Satellite and Katello versions, this change does not apply, because custom products are disabled by default.

Comment 1 Jeremy Lenz 2023-04-20 14:46:13 UTC

Created from redmine issue https://projects.theforeman.org/issues/36301

Comment 2 Jeremy Lenz 2023-04-20 14:46:14 UTC

Upstream bug assigned to jlenz

Comment 5 Bryan Kearney 2023-04-25 20:03:23 UTC

Moving this bug to POST for triage into Satellite since the upstream issue https://projects.theforeman.org/issues/36301 has been resolved.

Comment 21 errata-xmlrpc 2023-07-12 15:37:22 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Satellite 6.13.2 Async Update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:4043