When creating client RPMs with rhui-manager, the tool knows exactly what repositories are available to clients, so it should specify repository paths in full e.g. /pulp/contents/.../rhel/server/7/7Server/x86_64/os instead of: /pulp/contents/.../rhel/server/7/$releasever/$basearch/os This applies to any variables (releasever, basearch and whatnot) but the effects are more pronounced on the releasever variable. The impact this has on hosts is that any host that ends up setting a release version in /etc/yum/vars/releasever that conflicts with what the certs in the client RPM give access to will face errors when downloading from RHUI repositories.