Moving this bug to POST for triage into Satellite since the upstream issue https://projects.theforeman.org/issues/29956 has been resolved.

Created attachment 1711885 [details]
locked templates

Checked on Satellite 6.7.3, seems that Ansible related job templates didn't get the default lock (see attachment), in the 6.8 version of this BZ, these same templates received the fix

In Ansible plugin templates are locked since version 5.1.0,
this version has been added to Satellite in 6.8.0/5.0 snap (see https://ohsnap.sat.engineering.redhat.com/streams/6.8/releases/6.8.0/snaps/5.0/packages).

This BZ is a clone for 6.7.z, more specifically for 6.7.3, we need to backport the patch that locks templates to the version we ship in this release.

BZ MR: https://gitlab.sat.engineering.redhat.com/satellite6/foreman_ansible/-/merge_requests/9

We're going to postpone this for 6.7.4, which will also include the fix for Ansible templates.

Peter, 

Per email discussion with Sudhir, QE wanted to mark this as verified, and so the recommendation was to put ON_QA so that could be done.

James

In the 6.8 version of this BZ I noticed that the Run OpenSCAP scans template stays unlocked, it will probably need to be fixed also here.

Moved this to modified per https://bugzilla.redhat.com/show_bug.cgi?id=1873477#c3

Checked on Satellite 6.7.4, default lock missing on the "Run OpenSCAP scans", we'll need to get in https://github.com/theforeman/foreman-packaging/pull/5773

Or better to say, this needs pulling in https://github.com/theforeman/foreman_openscap/pull/438

Verified on Satellite 6.7.4-2

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: Satellite 6.7.4 Async Bug Fix Update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2020:4127