Red Hat Satellite engineering is moving the tracking of its product development work on Satellite to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "Satellite project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs will be migrated starting at the end of May. If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "Satellite project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/SAT-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1929347 - pulp3: Ensure migration plugin runs in FIPS mode and respects the ALLOWED_CONTENT_CHECKSUMS configuration
Summary: pulp3: Ensure migration plugin runs in FIPS mode and respects the ALLOWED_CON...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Packaging
Version: 6.9.0
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: 6.9.9
Assignee: satellite6-bugs
QA Contact: Peter Ondrejka
URL:
Whiteboard:
: 1995524 (view as bug list)
Depends On: 2017489 2019563
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-02-16 17:35 UTC by Tanya Tereshchenko
Modified: 2022-04-20 20:35 UTC (History)
15 users (show)

Fixed In Version: python-pulpcore-3.7.8-2
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1973346 (view as bug list)
Environment:
Last Closed: 2022-04-20 20:34:52 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Pulp Redmine 7782 0 Normal CLOSED - COMPLETE Ensure migration plugin runs in FIPS mode and respects the ALLOWED_CONTENT_CHECKSUMS configuraiton 2021-04-13 18:23:48 UTC
Red Hat Product Errata RHSA-2022:1478 0 None None None 2022-04-20 20:35:14 UTC

Description Tanya Tereshchenko 2021-02-16 17:35:59 UTC 
Description of problem:


Katello needs to run in a FIPS-enabled environment with the migration plugin.

The prerequisite for this task would be pulpcore, pulp_file, pulp_container and pulp_rpm being able to function in the FIPS environment.
Comment 1 pulp-infra@redhat.com 2021-02-16 18:07:05 UTC 
The Pulp upstream bug status is at NEW. Updating the external tracker on this bug.
Comment 2 pulp-infra@redhat.com 2021-02-16 18:07:06 UTC 
The Pulp upstream bug priority is at Normal. Updating the external tracker on this bug.
Comment 5 pulp-infra@redhat.com 2021-03-16 15:11:28 UTC 
The Pulp upstream bug status is at ASSIGNED. Updating the external tracker on this bug.
Comment 7 pulp-infra@redhat.com 2021-04-13 18:23:47 UTC 
The Pulp upstream bug status is at CLOSED - COMPLETE. Updating the external tracker on this bug.
Comment 8 pulp-infra@redhat.com 2021-04-13 19:17:05 UTC 
All upstream Pulp bugs are at MODIFIED+. Moving this bug to POST.
Comment 10 Tanya Tereshchenko 2021-06-07 11:01:25 UTC 
The patches which should be included are specified here: https://hackmd.io/@pulp/Pulp3-FIPS-matrix#What-about-37
Comment 16 pulp-infra@redhat.com 2021-08-11 15:09:47 UTC 
Requesting needsinfo from upstream developer ggainey because the 'FailedQA' flag is set.
Comment 19 Tanya Tereshchenko 2021-08-26 17:33:25 UTC 
*** Bug 1995524 has been marked as a duplicate of this bug. ***
Comment 22 Lai 2021-10-26 15:42:41 UTC 
Failing this.  Please look at https://bugzilla.redhat.com/show_bug.cgi?id=2017489 as to why and reproducer.
Comment 23 Brad Buckingham 2021-10-29 14:47:31 UTC 
Bug 2017489 referenced in comment 22 is now MODIFIED.

Under the assumption that including that fix should result in this bugzilla going ON_QA for verification, I am going to move this one to ON_DEV.  That will trigger this bugzilla to go ON_QA at the same time as bug 2017489.
Comment 24 Lai 2021-11-02 20:31:28 UTC 
Failing QE.  Please check https://bugzilla.redhat.com/show_bug.cgi?id=2019563 for more info.
Comment 28 Peter Ondrejka 2022-03-28 13:19:10 UTC 
Verified on Satellite 6.9.9 snap 2 on fips-enabled rhel7 -- content is migrated successfully
Comment 34 errata-xmlrpc 2022-04-20 20:34:52 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: Satellite 6.9.9 Async Bug Fix Update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:1478
Note You need to log in before you can comment on or make changes to this bug.