RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1313208 - rh_subscription has no concept of custom CA certificates
Summary: rh_subscription has no concept of custom CA certificates
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: cloud-init
Version: 7.4
Hardware: All
OS: All
medium
medium
Target Milestone: rc
: 7.3
Assignee: Lars Kellogg-Stedman
QA Contact: Zhitao Lin
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-03-01 08:16 UTC by Marcel Wysocki
Modified: 2020-07-02 12:28 UTC (History)
6 users (show)

Fixed In Version: cloud-init-0.7.9-1
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-12-19 01:57:21 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Marcel Wysocki 2016-03-01 08:16:52 UTC
Description of problem:
rh_subscription runs before bootcmd, where I install the CA cert.
Ideally the module itself should have a way to install custom satellite certs

[   18.108960] cloud-init[808]: 2016-03-01 03:03:18,678 - cc_rh_subscription.py[WARNING]: Registration failed due to: Error: CA certificate for subscription service has not been installed.
[   18.109436] cloud-init[808]: 2016-03-01 03:03:18,678 - cc_rh_subscription.py[WARNING]: Registration failed or did not run completely
[   18.109741] cloud-init[808]: 2016-03-01 03:03:18,678 - cc_rh_subscription.py[WARNING]: rh_subscription plugin did not complete successfully
[   18.339075] cloud-init[808]: Retrieving http://satsatsat.sat.sat/pub/katello-ca-consumer-latest.noarch.rpm
[   18.340928] cloud-init[808]: Preparing...                          ########################################
[   18.342057] cloud-init[808]: Updating / installing...
[   18.342714] cloud-init[808]: katello-ca-consumer-satsatsat.########################################

Version-Release number of selected component (if applicable):
0.7.6

Comment 2 Lars Kellogg-Stedman 2017-01-16 18:36:52 UTC
In the forthcoming 0.7.9 cloud-init package (which should be dropping Real Soon Now), the rh_subscription plugin now runs as part of cloud_config_modules, which comes after both bootcmd and write-files.  This should permit installation of custom certificates.

Comment 3 Zhitao Lin 2019-12-18 08:14:51 UTC
In cloud-init 18.5 and RHEL 7.7.2019090316, the issue is gone. So move the status to VERIFIED.

Below is detailed test info.

Test steps:
1. Create a VM on Azure and deploy cloud-init as the provisioning agent
2. Make sure it is unregistered.
3. configure the cloud-init configure file in /etc/cloud/cloud.cfg.d/*.cfg (Mine is rh_subscription.cfg)
4. Delete cloud-init's semaphore files in /var/lib/cloud/instance/sem
5. restart VM and it should be registered.

Comment 4 Huijuan Zhao 2019-12-19 01:57:21 UTC
CLOSE this bug since the build(cloud-init 18.5 and RHEL 7.7) already released.

Comment 5 Corey Shafer 2020-07-02 12:28:47 UTC
I am having this issue using Satellite 6.7 and a CentOS 7.8 image being deployed with a cloud-init userdata template.  Should I make another bug request?


Note You need to log in before you can comment on or make changes to this bug.