Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1703607

Summary:	the subscription-manager product-id plugin for yum is not removing the product cert (from the repo) when the last pkg (from the repo) is removed
Product:	Red Hat Enterprise Linux 7	Reporter:	John Sefler <jsefler>
Component:	subscription-manager	Assignee:	Jiri Hnidek <jhnidek>
Status:	CLOSED ERRATA	QA Contact:	Red Hat subscription-manager QE Team <rhsm-qe>
Severity:	high	Docs Contact:
Priority:	high
Version:	7.7	CC:	csnyder, jhnidek, jomurphy, redakkan
Target Milestone:	rc	Keywords:	Regression, Triaged
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2019-08-06 12:57:32 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description John Sefler 2019-04-26 21:39:47 UTC

Description of problem:

To demonstrate, I will attach a High Availability SKU and install a sample package "omping" from the high availability repo (watch the product cert 83.pem be installed) and then remove the package (and fail to see product cert 83.pem be removed).

Version-Release number of selected component (if applicable):
[root@kvm-01-guest10 ~]# subscription-manager version
server type: This system is currently not registered.
subscription management server: 2.3.17-1
subscription management rules: 5.35
subscription-manager: 1.24.4-1.el7


How reproducible:


Steps to Reproduce:
[root@kvm-01-guest10 ~]# subscription-manager list --installed
+-------------------------------------------+
    Installed Product Status
+-------------------------------------------+
Product Name:   Red Hat Enterprise Linux Server
Product ID:     69
Version:        7.7 Beta
Arch:           x86_64
Status:         Unknown
Status Details: 
Starts:         
Ends:           

[root@kvm-01-guest10 ~]# ls /etc/pki/product*
/etc/pki/product:

/etc/pki/product-default:
69.pem

[root@kvm-01-guest10 ~]# cat /var/lib/rhsm/productid.js 
{
  "69": [
    "beaker-Server"
  ]
}

[root@kvm-01-guest10 ~]# subscription-manager register --serverurl=subscription.rhsm.stage.redhat.com --username=stage_auto_testuser
Registering to: subscription.rhsm.stage.redhat.com:443/subscription
Password: 
The system has been registered with ID: 57cfa03b-65f2-4c3b-bee6-ad02a80296c1
The registered system name is: kvm-01-guest10.rhts.eng.tlv.redhat.com

[root@kvm-01-guest10 ~]# subscription-manager list --available --matches="High Availability"
+-------------------------------------------+
    Available Subscriptions
+-------------------------------------------+
Subscription Name:   High Availability
Provides:            Red Hat Enterprise Linux High Availability for x86_64
SKU:                 RH00025
Contract:            11843874
Pool ID:             8a99f9a86885be6c01689c8af47b2b41
Provides Management: No
Available:           100
Suggested:           1
Service Level:       Layered
Service Type:        L1-L3
Subscription Type:   Instance Based
Starts:              01/29/2019
Ends:                01/29/2020
System Type:         Physical

[root@kvm-01-guest10 ~]# subscription-manager attach --pool=8a99f9a86885be6c01689c8af47b2b41
Successfully attached a subscription for: High Availability

[root@kvm-01-guest10 ~]# yum install omping --enablerepo=rhel-ha-for-rhel-7-server-rpms --disablerepo=*-sap-* --disablerepo=beaker*
Loaded plugins: product-id, search-disabled-repos, subscription-manager
Resolving Dependencies
--> Running transaction check
---> Package omping.x86_64 0:0.0.4-6.el7 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

=======================================================================================
 Package     Arch        Version             Repository                           Size
=======================================================================================
Installing:
 omping      x86_64      0.0.4-6.el7         rhel-ha-for-rhel-7-server-rpms       37 k

Transaction Summary
=======================================================================================
Install  1 Package

Total download size: 37 k
Installed size: 66 k
Is this ok [y/d/N]: y
Downloading packages:
omping-0.0.4-6.el7.x86_64.rpm                                   |  37 kB  00:00:00     
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Installing : omping-0.0.4-6.el7.x86_64                                           1/1 
  Verifying  : omping-0.0.4-6.el7.x86_64                                           1/1 

Installed:
  omping.x86_64 0:0.0.4-6.el7                                                          

Complete!

[root@kvm-01-guest10 ~]# subscription-manager list --installed
+-------------------------------------------+
    Installed Product Status
+-------------------------------------------+
Product Name:   Red Hat Enterprise Linux Server
Product ID:     69
Version:        7.7 Beta
Arch:           x86_64
Status:         Not Subscribed
Status Details: Not supported by a valid subscription.
Starts:         
Ends:           

Product Name:   Red Hat Enterprise Linux High Availability (for RHEL Server)
Product ID:     83
Version:        7.6
Arch:           x86_64
Status:         Subscribed
Status Details: 
Starts:         01/29/2019
Ends:           01/29/2020

[root@kvm-01-guest10 ~]# ls /etc/pki/product*
/etc/pki/product:
83.pem

/etc/pki/product-default:
69.pem

[root@kvm-01-guest10 ~]# yum list installed | grep rhel-ha-for-rhel-7-server-rpms
omping.x86_64                         0.0.4-6.el7             @rhel-ha-for-rhel-7-server-rpms

[root@kvm-01-guest10 ~]# cat /var/lib/rhsm/productid.js 
{
  "69": [
    "beaker-Server"
  ], 
  "83": [
    "rhel-ha-for-rhel-7-server-rpms"
  ]
}



[root@kvm-01-guest10 ~]# yum remove omping --enablerepo=rhel-ha-for-rhel-7-server-rpms --disablerepo=*-sap-* --disablerepo=beaker*
Loaded plugins: product-id, search-disabled-repos, subscription-manager
Resolving Dependencies
--> Running transaction check
---> Package omping.x86_64 0:0.0.4-6.el7 will be erased
--> Finished Dependency Resolution

Dependencies Resolved

=======================================================================================
 Package     Arch        Version            Repository                            Size
=======================================================================================
Removing:
 omping      x86_64      0.0.4-6.el7        @rhel-ha-for-rhel-7-server-rpms       66 k

Transaction Summary
=======================================================================================
Remove  1 Package

Installed size: 66 k
Is this ok [y/N]: y
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Erasing    : omping-0.0.4-6.el7.x86_64                                           1/1 
  Verifying  : omping-0.0.4-6.el7.x86_64                                           1/1 

Removed:
  omping.x86_64 0:0.0.4-6.el7                                                          

Complete!

[root@kvm-01-guest10 ~]# cat /var/lib/rhsm/productid.js 
{
  "69": [
    "beaker-Server"
  ], 
  "83": [
    "rhel-ha-for-rhel-7-server-rpms"
  ]
}

[root@kvm-01-guest10 ~]# ls /etc/pki/product*
/etc/pki/product:
83.pem

/etc/pki/product-default:
69.pem

[root@kvm-01-guest10 ~]# subscription-manager list --installed
+-------------------------------------------+
    Installed Product Status
+-------------------------------------------+
Product Name:   Red Hat Enterprise Linux Server
Product ID:     69
Version:        7.7 Beta
Arch:           x86_64
Status:         Not Subscribed
Status Details: Not supported by a valid subscription.
Starts:         
Ends:           

Product Name:   Red Hat Enterprise Linux High Availability (for RHEL Server)
Product ID:     83
Version:        7.6
Arch:           x86_64
Status:         Subscribed
Status Details: 
Starts:         01/29/2019
Ends:           01/29/2020

[root@kvm-01-guest10 ~]# yum list installed | grep rhel-ha-for-rhel-7-server-rpms
[root@kvm-01-guest10 ~]# 





Actual results:
  product 83.pem remains installed after removing the only package omping installed from the rhel-ha-for-rhel-7-server-rpms repo.  

Expected results:
  Since there are no more installed packages from rhel-ha-for-rhel-7-server-rpms, the product cert 83.pem should have been removed.



Additional info:
[root@kvm-01-guest10 ~]# tail -f /var/log/rhsm/rhsm.log 



2019-04-27 00:35:24,091 [DEBUG] yum:3349:MainThread @identity.py:138 - Loading consumer info from identity certificates.
2019-04-27 00:35:24,093 [INFO] yum:3349:MainThread @connection.py:924 - Connection built: host=subscription.rhsm.stage.redhat.com port=443 handler=/subscription auth=identity_cert ca_dir=/etc/rhsm/ca/ insecure=False
2019-04-27 00:35:24,098 [INFO] yum:3349:MainThread @connection.py:924 - Connection built: host=subscription.rhsm.stage.redhat.com port=443 handler=/subscription auth=identity_cert ca_dir=/etc/rhsm/ca/ insecure=False
2019-04-27 00:35:24,099 [DEBUG] yum:3349:MainThread @connection.py:543 - Loaded CA certificates from /etc/rhsm/ca/: redhat-uep.pem, redhat-entitlement-authority.pem
2019-04-27 00:35:24,099 [DEBUG] yum:3349:MainThread @connection.py:591 - Making request: GET /subscription/
2019-04-27 00:35:24,875 [INFO] yum:3349:MainThread @connection.py:638 - Response: status=200, request="GET /subscription/"
2019-04-27 00:35:24,876 [DEBUG] yum:3349:MainThread @connection.py:941 - Server supports the following resources: {u'': u'/', u'guestids': u'/consumers/{consumer_uuid}/guestids', u'cdn': u'/cdn', u'content_overrides': u'/consumers/{consumer_uuid}/content_overrides', u'hypervisors': u'/hypervisors', u'serials': u'/serials', u'deleted_consumers': u'/deleted_consumers', u'consumers': u'/consumers', u'migrations': u'/migrations', u'content': u'/content', u'entitlements': u'/entitlements', u'events': u'/events', u'status': u'/status', u'jobs': u'/jobs', u'users': u'/users', u'subscriptions': u'/subscriptions', u'rules': u'/rules', u'distributor_versions': u'/distributor_versions', u'consumertypes': u'/consumertypes', u'statistics/generate': u'/statistics/generate', u'pools': u'/pools', u'atom': u'/atom', u'packages': u'/consumers/{consumer_uuid}/packages', u'owners': u'/owners', u'roles': u'/roles', u'admin': u'/admin', u'products': u'/products', u'activation_keys': u'/activation_keys', u'crl': u'/crl'}
2019-04-27 00:35:24,884 [DEBUG] yum:3349:MainThread @__init__.py:92 - Searching for content of type: yum
2019-04-27 00:35:24,884 [DEBUG] yum:3349:MainThread @__init__.py:92 - Searching for content of type: deb
2019-04-27 00:35:24,886 [DEBUG] yum:3349:MainThread @connection.py:543 - Loaded CA certificates from /etc/rhsm/ca/: redhat-uep.pem, redhat-entitlement-authority.pem
2019-04-27 00:35:24,887 [DEBUG] yum:3349:MainThread @connection.py:591 - Making request: GET /subscription/consumers/57cfa03b-65f2-4c3b-bee6-ad02a80296c1/release
2019-04-27 00:35:25,922 [INFO] yum:3349:MainThread @connection.py:638 - Response: status=200, requestUuid=c9740d9c-edc2-41ee-ad90-380968b60b57, request="GET /subscription/consumers/57cfa03b-65f2-4c3b-bee6-ad02a80296c1/release"
2019-04-27 00:35:25,924 [DEBUG] yum:3349:WriteCacheReleaseStatusCacheThread @cache.py:114 - Wrote cache: /var/lib/rhsm/cache/releasever.json
2019-04-27 00:35:25,924 [DEBUG] yum:3349:MainThread @cache.py:302 - Started thread to write cache: /var/lib/rhsm/cache/releasever.json
2019-04-27 00:35:25,959 [DEBUG] yum:3349:MainThread @cache.py:114 - Wrote cache: /var/lib/rhsm/cache/written_overrides.json
2019-04-27 00:35:25,960 [INFO] yum:3349:MainThread @repolib.py:464 - repos updated: Repo updates

Total repo updates: 9
Updated
    [id:rhel-ha-for-rhel-7-server-source-rpms Red Hat Enterprise Linux High Availability (for RHEL 7 Server) (Source RPMs)]
    [id:rhel-ha-for-rhel-7-server-beta-debug-rpms Red Hat Enterprise Linux High Availability (for RHEL 7 Server) Beta (Debug RPMs)]
    [id:rhel-ha-for-rhel-7-server-rpms Red Hat Enterprise Linux High Availability (for RHEL 7 Server) (RPMs)]
    [id:rhel-ha-for-rhel-7-server-fastrack-rpms Red Hat Enterprise Linux High Availability (for RHEL 7 Server) - Fastrack (RPMs)]
    [id:rhel-ha-for-rhel-7-server-fastrack-source-rpms Red Hat Enterprise Linux High Availability (for RHEL 7 Server) - Fastrack (Source RPMs)]
    [id:rhel-ha-for-rhel-7-server-beta-rpms Red Hat Enterprise Linux High Availability (for RHEL 7 Server) Beta (RPMs)]
    [id:rhel-ha-for-rhel-7-server-debug-rpms Red Hat Enterprise Linux High Availability (for RHEL 7 Server) (Debug RPMs)]
    [id:rhel-ha-for-rhel-7-server-fastrack-debug-rpms Red Hat Enterprise Linux High Availability (for RHEL 7 Server) - Fastrack (Debug RPMs)]
    [id:rhel-ha-for-rhel-7-server-beta-source-rpms Red Hat Enterprise Linux High Availability (for RHEL 7 Server) Beta (Source RPMs)]
Added (new)
    <NONE>
Deleted
    <NONE>
2019-04-27 00:35:31,677 [WARNING] yum:3349:MainThread @logutil.py:142 - logging already initialized
2019-04-27 00:35:31,680 [DEBUG] yum:3349:MainThread @plugins.py:571 - loaded plugin modules: [<module 'container_content' from '/usr/share/rhsm-plugins/container_content.pyc'>, <module 'ostree_content' from '/usr/share/rhsm-plugins/ostree_content.pyc'>]
2019-04-27 00:35:31,681 [DEBUG] yum:3349:MainThread @plugins.py:572 - loaded plugins: {'container_content.ContainerContentPlugin': <container_content.ContainerContentPlugin object at 0x7fa6dc4aa950>, 'ostree_content.OstreeContentPlugin': <ostree_content.OstreeContentPlugin object at 0x7fa6dc4aa610>}
2019-04-27 00:35:31,709 [DEBUG] yum:3349:MainThread @productid.py:432 - Checking for product id certs to install or update.
2019-04-27 00:35:31,709 [DEBUG] yum:3349:MainThread @productid.py:437 - active set([])
2019-04-27 00:35:31,709 [DEBUG] yum:3349:MainThread @productid.py:438 - enabled [(<rhsm.certificate2.ProductCertificate object at 0x7fa6dc4aa850>, 'rhel-ha-for-rhel-7-server-rpms')]
2019-04-27 00:35:31,709 [DEBUG] yum:3349:MainThread @productid.py:454 - product cert: 83 repo: rhel-ha-for-rhel-7-server-rpms
2019-04-27 00:35:31,710 [DEBUG] yum:3349:MainThread @productid.py:570 - about to run post_product_id_install
2019-04-27 00:35:31,710 [DEBUG] yum:3349:MainThread @productid.py:581 - about to run post_product_id_update

Comment 5 Rehana 2019-06-21 10:02:46 UTC

Reproducing the failure :
=========================
# subscription-manager version
server type: Red Hat Subscription Management
subscription management server: 2.3.17-1
subscription management rules: 5.35
subscription-manager: 1.24.6-1.el7

[root@kvm-01-guest19 ~]# subscription-manager list --installed
+-------------------------------------------+
    Installed Product Status
+-------------------------------------------+
Product Name:   Red Hat Enterprise Linux Server
Product ID:     69
Version:        7.7 Beta
Arch:           x86_64
Status:         Unknown
Status Details: 
Starts:         
Ends:           

[root@kvm-01-guest19 ~]# ls /etc/pki/product*
/etc/pki/product:

/etc/pki/product-default:
69.pem
[root@kvm-01-guest19 ~]# cat /var/lib/rhsm/productid.js 
{
  "69": [
    "beaker-Server"
  ]
}

[root@kvm-01-guest19 ~]# subscription-manager register --serverurl=subscription.rhsm.stage.redhat.com --username=stage_auto_testuser
Registering to: subscription.rhsm.stage.redhat.com:443/subscription
Password: 
The system has been registered with ID: c32d0c50-e411-4ebb-9625-5348a01b7900
The registered system name is: kvm-01-guest19.rhts.eng.tlv.redhat.com
[root@kvm-01-guest19 ~]# subscription-manager list --available --matches="High Availability"
+-------------------------------------------+
    Available Subscriptions
+-------------------------------------------+
Subscription Name:   High Availability
Provides:            Red Hat Enterprise Linux High Availability for x86_64
SKU:                 RH00025
Contract:            11843874
Pool ID:             8a99f9a86885be6c01689c8af47b2b41
Provides Management: No
Available:           95
Suggested:           1
Service Level:       Layered
Service Type:        L1-L3
Subscription Type:   Instance Based
Starts:              Tuesday 29 January 2019
Ends:                Wednesday 29 January 2020
System Type:         Physical

[root@kvm-01-guest19 ~]# subscription-manager attach --pool 8a99f9a86885be6c01689c8af47b2b41
Successfully attached a subscription for: High Availability
[root@kvm-01-guest19 ~]# yum install omping --enablerepo=rhel-ha-for-rhel-7-server-rpms --disablerepo=*-sap-* --disablerepo=beaker*
Loaded plugins: product-id, search-disabled-repos, subscription-manager
rhel-ha-for-rhel-7-server-rpms                                                                                                                                                              | 3.4 kB  00:00:00     
(1/3): rhel-ha-for-rhel-7-server-rpms/7Server/x86_64/updateinfo                                                                                                                             | 112 kB  00:00:01     
(2/3): rhel-ha-for-rhel-7-server-rpms/7Server/x86_64/group                                                                                                                                  |  16 kB  00:00:02     
(3/3): rhel-ha-for-rhel-7-server-rpms/7Server/x86_64/primary_db                                                                                                                             | 373 kB  00:00:01     
Resolving Dependencies
--> Running transaction check
---> Package omping.x86_64 0:0.0.4-6.el7 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

===================================================================================================================================================================================================================
 Package                                    Arch                                       Version                                            Repository                                                          Size
===================================================================================================================================================================================================================
Installing:
 omping                                     x86_64                                     0.0.4-6.el7                                        rhel-ha-for-rhel-7-server-rpms                                      37 k

Transaction Summary
===================================================================================================================================================================================================================
Install  1 Package

Total download size: 37 k
Installed size: 66 k
Is this ok [y/d/N]: y
Downloading packages:
warning: /var/cache/yum/x86_64/7Server/rhel-ha-for-rhel-7-server-rpms/packages/omping-0.0.4-6.el7.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID fd431d51: NOKEY             ]  0.0 B/s |    0 B  --:--:-- ETA 
Public key for omping-0.0.4-6.el7.x86_64.rpm is not installed
omping-0.0.4-6.el7.x86_64.rpm                                                                                                                                                               |  37 kB  00:00:01     
Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
Importing GPG key 0xFD431D51:
 Userid     : "Red Hat, Inc. (release key 2) <security>"
 Fingerprint: 567e 347a d004 4ade 55ba 8a5f 199e 2f91 fd43 1d51
 Package    : redhat-release-server-7.7-6.el7.x86_64 (@beaker-Server/7.7)
 From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
Is this ok [y/N]: y
Importing GPG key 0x2FA658E0:
 Userid     : "Red Hat, Inc. (auxiliary key) <security>"
 Fingerprint: 43a6 e49c 4a38 f4be 9abf 2a53 4568 9c88 2fa6 58e0
 Package    : redhat-release-server-7.7-6.el7.x86_64 (@beaker-Server/7.7)
 From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
Is this ok [y/N]: y
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Installing : omping-0.0.4-6.el7.x86_64                                                                                                                                                                       1/1 
rhel-ha-for-rhel-7-server-rpms/7Server/x86_64/productid                                                                                                                                     | 2.2 kB  00:00:00     
  Verifying  : omping-0.0.4-6.el7.x86_64                                                                                                                                                                       1/1 

Installed:
  omping.x86_64 0:0.0.4-6.el7                                                                                                                                                                                      

Complete!
[root@kvm-01-guest19 ~]#  subscription-manager list --installed
+-------------------------------------------+
    Installed Product Status
+-------------------------------------------+
Product Name:   Red Hat Enterprise Linux Server
Product ID:     69
Version:        7.7 Beta
Arch:           x86_64
Status:         Not Subscribed
Status Details: Not supported by a valid subscription.
Starts:         
Ends:           

Product Name:   Red Hat Enterprise Linux High Availability (for RHEL Server)
Product ID:     83
Version:        7.6
Arch:           x86_64
Status:         Subscribed
Status Details: 
Starts:         Tuesday 29 January 2019
Ends:           Wednesday 29 January 2020

[root@kvm-01-guest19 ~]# ls /etc/pki/product*
/etc/pki/product:
83.pem

/etc/pki/product-default:
69.pem
[root@kvm-01-guest19 ~]#  yum list installed | grep rhel-ha-for-rhel-7-server-rpms
omping.x86_64                         0.0.4-6.el7             @rhel-ha-for-rhel-7-server-rpms
[root@kvm-01-guest19 ~]#  cat /var/lib/rhsm/productid.js 
{
  "69": [
    "beaker-Server"
  ], 
  "83": [
    "rhel-ha-for-rhel-7-server-rpms"
  ]
}[root@kvm-01-guest19 ~]#  yum remove omping --enablerepo=rhel-ha-for-rhel-7-server-rpms --disablerepo=*-sap-* --disablerepo=beaker*
Loaded plugins: product-id, search-disabled-repos, subscription-manager
Resolving Dependencies
--> Running transaction check
---> Package omping.x86_64 0:0.0.4-6.el7 will be erased
--> Finished Dependency Resolution

Dependencies Resolved

===================================================================================================================================================================================================================
 Package                                    Arch                                       Version                                           Repository                                                           Size
===================================================================================================================================================================================================================
Removing:
 omping                                     x86_64                                     0.0.4-6.el7                                       @rhel-ha-for-rhel-7-server-rpms                                      66 k

Transaction Summary
===================================================================================================================================================================================================================
Remove  1 Package

Installed size: 66 k
Is this ok [y/N]: y
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Erasing    : omping-0.0.4-6.el7.x86_64                                                                                                                                                                       1/1 
  Verifying  : omping-0.0.4-6.el7.x86_64                                                                                                                                                                       1/1 

Removed:
  omping.x86_64 0:0.0.4-6.el7                                                                                                                                                                                      

Complete!
[root@kvm-01-guest19 ~]#  cat /var/lib/rhsm/productid.js 
{
  "69": [
    "beaker-Server"
  ], 
  "83": [
    "rhel-ha-for-rhel-7-server-rpms"
  ]
[root@kvm-01-guest19 ~]#  subscription-manager list --installed
+-------------------------------------------+
    Installed Product Status
+-------------------------------------------+
Product Name:   Red Hat Enterprise Linux Server
Product ID:     69
Version:        7.7 Beta
Arch:           x86_64
Status:         Not Subscribed
Status Details: Not supported by a valid subscription.
Starts:         
Ends:           

Product Name:   Red Hat Enterprise Linux High Availability (for RHEL Server)
Product ID:     83
Version:        7.6
Arch:           x86_64
Status:         Subscribed
Status Details: 
Starts:         Tuesday 29 January 2019
Ends:           Wednesday 29 January 2020

[root@kvm-01-guest19 ~]# ls /etc/pki/product*
/etc/pki/product:
83.pem

/etc/pki/product-default:
69.pem

Comment 6 Rehana 2019-06-21 10:08:51 UTC

Verifying on :
=============
subscription management server: 2.3.17-1
subscription management rules: 5.35
subscription-manager: 1.24.11-1.el7

# rpm -qa subscription-manager* --changelog | grep 1703607
- 1703607: Remove productid cert, when it is not needed; ENT-1300
- 1703607: Remove productid cert, when it is not needed; ENT-1300
- 1703607: Remove productid cert, when it is not needed; ENT-1300

[root@kvm-06-guest02 ~]# subscription-manager list --installed
+-------------------------------------------+
    Installed Product Status
+-------------------------------------------+
Product Name:   Red Hat Enterprise Linux for x86_64 High Touch Beta
Product ID:     230
Version:        7.7 HTB
Arch:           x86_64
Status:         Unknown
Status Details: 
Starts:         
Ends:           

[root@kvm-06-guest02 ~]# ls /etc/pki/product*
/etc/pki/product:

/etc/pki/product-default:
230.pem
[root@kvm-06-guest02 ~]# cat /var/lib/rhsm/productid.js 
{
  "230": [
    "beaker-Server"
  ]
}[root@kvm-06-guest02 ~]# subscription-manager register --serverurl=subscription.rhsm.stage.redhat.com --username=stage_auto_testuser
Registering to: subscription.rhsm.stage.redhat.com:443/subscription
Password: 
The system has been registered with ID: 1d19876b-4c0c-45c0-8cf0-11ede65a6a8f
The registered system name is: kvm-06-guest02.hv2.lab.eng.bos.redhat.com
[root@kvm-06-guest02 ~]# subscription-manager list --available --matches="High Availability"
+-------------------------------------------+
    Available Subscriptions
+-------------------------------------------+
Subscription Name:   High Availability
Provides:            Red Hat Enterprise Linux High Availability for x86_64
SKU:                 RH00025
Contract:            11843874
Pool ID:             8a99f9a86885be6c01689c8af47b2b41
Provides Management: No
Available:           94
Suggested:           1
Service Level:       Layered
Service Type:        L1-L3
Subscription Type:   Instance Based
Starts:              Tuesday 29 January 2019
Ends:                Tuesday 28 January 2020
System Type:         Physical

[root@kvm-06-guest02 ~]# subscription-manager attach --pool 8a99f9a86885be6c01689c8af47b2b41
Successfully attached a subscription for: High Availability
[root@kvm-06-guest02 ~]# yum install omping --enablerepo=rhel-ha-for-rhel-7-server-rpms --disablerepo=*-sap-* --disablerepo=beaker*
Loaded plugins: product-id, search-disabled-repos, subscription-manager
rhel-ha-for-rhel-7-server-rpms                                                                                                                                                              | 3.4 kB  00:00:00     
(1/3): rhel-ha-for-rhel-7-server-rpms/7Server/x86_64/group                                                                                                                                  |  16 kB  00:00:01     
(2/3): rhel-ha-for-rhel-7-server-rpms/7Server/x86_64/updateinfo                                                                                                                             | 112 kB  00:00:01     
(3/3): rhel-ha-for-rhel-7-server-rpms/7Server/x86_64/primary_db                                                                                                                             | 373 kB  00:00:03     
Resolving Dependencies
--> Running transaction check
---> Package omping.x86_64 0:0.0.4-6.el7 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

===================================================================================================================================================================================================================
 Package                                    Arch                                       Version                                            Repository                                                          Size
===================================================================================================================================================================================================================
Installing:
 omping                                     x86_64                                     0.0.4-6.el7                                        rhel-ha-for-rhel-7-server-rpms                                      37 k

Transaction Summary
===================================================================================================================================================================================================================
Install  1 Package

Total download size: 37 k
Installed size: 66 k
Is this ok [y/d/N]: y
Downloading packages:
warning: /var/cache/yum/x86_64/7Server/rhel-ha-for-rhel-7-server-rpms/packages/omping-0.0.4-6.el7.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID fd431d51: NOKEY             ]  0.0 B/s |    0 B  --:--:-- ETA 
Public key for omping-0.0.4-6.el7.x86_64.rpm is not installed
omping-0.0.4-6.el7.x86_64.rpm                                                                                                                                                               |  37 kB  00:00:00     
Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
Importing GPG key 0xFD431D51:
 Userid     : "Red Hat, Inc. (release key 2) <security>"
 Fingerprint: 567e 347a d004 4ade 55ba 8a5f 199e 2f91 fd43 1d51
 Package    : redhat-release-server-7.7-7.el7.x86_64 (@beaker-Server/7.7)
 From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
Is this ok [y/N]: y
Importing GPG key 0x2FA658E0:
 Userid     : "Red Hat, Inc. (auxiliary key) <security>"
 Fingerprint: 43a6 e49c 4a38 f4be 9abf 2a53 4568 9c88 2fa6 58e0
 Package    : redhat-release-server-7.7-7.el7.x86_64 (@beaker-Server/7.7)
 From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
Is this ok [y/N]: y
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Installing : omping-0.0.4-6.el7.x86_64                                                                                                                                                                       1/1 
  Verifying  : omping-0.0.4-6.el7.x86_64                                                                                                                                                                       1/1 
rhel-ha-for-rhel-7-server-rpms/7Server/x86_64/productid                                                                                                                                     | 2.2 kB  00:00:00     

Installed:
  omping.x86_64 0:0.0.4-6.el7                                                                                                                                                                                      

Complete!
[root@kvm-06-guest02 ~]# subscription-manager list --installed
+-------------------------------------------+
    Installed Product Status
+-------------------------------------------+
Product Name:   Red Hat Enterprise Linux for x86_64 High Touch Beta
Product ID:     230
Version:        7.7 HTB
Arch:           x86_64
Status:         Not Subscribed
Status Details: Not supported by a valid subscription.
Starts:         
Ends:           

Product Name:   Red Hat Enterprise Linux High Availability (for RHEL Server)
Product ID:     83
Version:        7.6
Arch:           x86_64
Status:         Subscribed
Status Details: 
Starts:         Tuesday 29 January 2019
Ends:           Tuesday 28 January 2020

[root@kvm-06-guest02 ~]# ls /etc/pki/product*
/etc/pki/product:
83.pem

/etc/pki/product-default:
230.pem
[root@kvm-06-guest02 ~]# cat /var/lib/rhsm/productid.js 
{
  "83": [
    "rhel-ha-for-rhel-7-server-rpms"
  ], 
  "230": [
    "beaker-Server"
  ]
}[root@kvm-06-guest02 ~]# yum list installed | grep rhel-ha-for-rhel-7-server-rpms
omping.x86_64                         0.0.4-6.el7             @rhel-ha-for-rhel-7-server-rpms
[root@kvm-06-guest02 ~]# yum remove omping --enablerepo=rhel-ha-for-rhel-7-server-rpms --disablerepo=*-sap-* --disablerepo=beaker*
Loaded plugins: product-id, search-disabled-repos, subscription-manager
Resolving Dependencies
--> Running transaction check
---> Package omping.x86_64 0:0.0.4-6.el7 will be erased
--> Finished Dependency Resolution

Dependencies Resolved

===================================================================================================================================================================================================================
 Package                                    Arch                                       Version                                           Repository                                                           Size
===================================================================================================================================================================================================================
Removing:
 omping                                     x86_64                                     0.0.4-6.el7                                       @rhel-ha-for-rhel-7-server-rpms                                      66 k

Transaction Summary
===================================================================================================================================================================================================================
Remove  1 Package

Installed size: 66 k
Is this ok [y/N]: y
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Erasing    : omping-0.0.4-6.el7.x86_64                                                                                                                                                                       1/1 
  Verifying  : omping-0.0.4-6.el7.x86_64                                                                                                                                                                       1/1 

Removed:
  omping.x86_64 0:0.0.4-6.el7                                                                                                                                                                                      

Complete!
[root@kvm-06-guest02 ~]# cat /var/lib/rhsm/productid.js 
{
  "230": [
    "beaker-Server"
  ]
}[root@kvm-06-guest02 ~]#  subscription-manager list --installed
+-------------------------------------------+
    Installed Product Status
+-------------------------------------------+
Product Name:   Red Hat Enterprise Linux for x86_64 High Touch Beta
Product ID:     230
Version:        7.7 HTB
Arch:           x86_64
Status:         Not Subscribed
Status Details: Not supported by a valid subscription.
Starts:         
Ends:           

[root@kvm-06-guest02 ~]# ls /etc/pki/product*
/etc/pki/product:

/etc/pki/product-default:
230.pem
[root@kvm-06-guest02 ~]# 

rhsm.log
=========

2019-06-21 10:06:14,951 [WARNING] yum:21366:MainThread @logutil.py:142 - logging already initialized
2019-06-21 10:06:14,952 [DEBUG] yum:21366:MainThread @plugins.py:571 - loaded plugin modules: []
2019-06-21 10:06:14,952 [DEBUG] yum:21366:MainThread @plugins.py:572 - loaded plugins: {}
2019-06-21 10:06:15,028 [DEBUG] yum:21366:MainThread @productid.py:652 - Checking for product certs to remove. Active include: set(['beaker-tasks', 'beaker-Server', 'beaker-Server-optional', 'beaker-harness'])
2019-06-21 10:06:15,028 [DEBUG] yum:21366:MainThread @productid.py:654 - Temporary disabled repos: []
2019-06-21 10:06:15,034 [DEBUG] yum:21366:MainThread @productid.py:665 - Skipping prod. cert.: /etc/pki/product-default/230.pem in protected directory
2019-06-21 10:06:15,034 [INFO] yum:21366:MainThread @productid.py:721 - None of the repos for 83 are active: [u'rhel-ha-for-rhel-7-server-rpms']
2019-06-21 10:06:15,034 [INFO] yum:21366:MainThread @productid.py:722 - product cert 83 for 83 is being deleted
2019-06-21 10:06:15,035 [DEBUG] yum:21366:MainThread @productid.py:432 - Checking for product id certs to install or update.
2019-06-21 10:06:15,035 [DEBUG] yum:21366:MainThread @productid.py:437 - active set(['beaker-tasks', 'beaker-Server', 'beaker-Server-optional', 'beaker-harness'])
2019-06-21 10:06:15,035 [DEBUG] yum:21366:MainThread @productid.py:438 - enabled [(<rhsm.certificate2.ProductCertificate object at 0x7fc4e7aeb9d0>, 'rhel-ha-for-rhel-7-server-rpms')]
2019-06-21 10:06:15,035 [DEBUG] yum:21366:MainThread @productid.py:454 - product cert: 83 repo: rhel-ha-for-rhel-7-server-rpms
2019-06-21 10:06:15,035 [DEBUG] yum:21366:MainThread @productid.py:570 - about to run post_product_id_install
2019-06-21 10:06:15,035 [DEBUG] yum:21366:MainThread @productid.py:581 - about to run post_product_id_update

Conclusion :

Observed that after the last package from the repo is removed , corresponding product is removed successfully.  Based on the observations , moving the bug to verified.

Comment 8 errata-xmlrpc 2019-08-06 12:57:32 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:2008