Description of problem: It's very easy now to find enable and sync Red Hat provided rpm type repos from connected to disconnected satellite. But the same is not very true for custom products\repos. 1. Proposed title of this feature request Provide an easy way to sync custom repos via newly developed ISS process. 2. Who is the customer behind the request? NA 3. What is the nature and description of the request? Improvement of user experience on ISS feature 4. Why does the customer need this? (List the business requirements here) ** Reduction of manual efforts ** Right now, when we have set up a connected and disconnected Satellite 7.0. Then: A) We need to know the fully published path of the Repo in question. B) Then on disconnected Satellite, Either we will need to manually create the repo there with that Published URL of the repo from the connected satellite. Or, we will need to use that URL to create the repo via Repo Discovery process. ** The repo discovery process, will only work if the custom repo in question in the connected Satellite is in an Unprotected state or else the Discovery feature will not work. And now imagine going through this for 50+ or 100+ custom repos. One may argue that it can be easily done via ansible after collecting all product names\ repo names and published URLs which is true but neither every user will use ansible nor the users will expect to create custom product\repos manually in disconnected satellite or via separate automation. So, If this is something that can not be immediately improved, please convert this BZ into a DOC RFE to explain "How to sync custom product\repos from connected satellite server" 5. How would the customer like to achieve this? (List the functional requirements here) As mentioned above 6. For each functional requirement listed, specify how Red Hat and the customer can test to confirm the requirement is successfully implemented. Some sort of feature should be there within ISS, that allows the Discovery of all custom repos at once in the disconnected satellite and then the creation of the same. Or else, simply mention the step-by-step approach of "How to sync custom product\repos from connected satellite server" in the ISS section of the Content Management guide. 7. Is there already an existing RFE upstream or in Red Hat Bugzilla? No 8. Does the customer have any specific timeline dependencies and which release would they like to target (i.e. RHEL5, RHEL6)? Before GA 9. Is the sales team involved in this request and do they have any additional input? N/A 10. List any affected packages or components. Satellite 7 11. Would the customer be able to assist in testing this functionality if implemented? NA
NOTE: When the repository is protected in upstream satellite, then at downstream satellite the repo can only be synced in these two conditions: Verify SSL: yes SSL CA Cert: <Selected as the Upstream Satellite CA> Or, Verify SSL: No
Sayan, You should be able to use the Debug Certificate of the upstream org in the downstream satellite. Here are the steps I 'd recommend On the upstream server 1) Go to Administer-> Organizations 2) Click on the interested organization 3) Download its debug certificate 4) From the interested repository's details page -> copy the "Published At" url. This should look something like https://satellite.example.com/pulp/content/Default_Organization/Library/custom/product/repo/ 5) Also download the CA cert -> https://satellite.example.com/pub/katello-server-ca.crt On the downstream server 1) Create a Content Credential of type "SSL Certificate" 2) Copy the contents of the debug cert there 1) Create a Content Credential of type "SSL Certificate" 2) Copy the contents of the CA cert there 3) Create a custom repo with url pointing to the above copied url 4) Set the "SSL CA Cert" to the Upstream server CA cert credential 5) Set the "SSL Client Cert" and "SSL Client Key" to Org Debug Certificate credential. Sync should work after this. You could do this today on 6.10/6.9 even.
Hello Yes and I already had mentioned that in the description itself but it is still a manual work and not exactly using the ISS feature here. The way we can quickly enable and sync RHEL repos via new ISS feature in satellite 7.0, in the same or some similar way we should be able to enable and sync repos inside custom product as well directly from connected satellite and that was my intention behind proposing this RFE. Now whether that is something possible to accomplish or not could be something on which you and team can comment on. But if the answer is no, for now, then in the content mgmt guide of disconnected satellite part, we need to mention clear instructions of how to sync custom repos from connected satellite into disconnected satellite 7.0 BR, Sayan
*** Bug 2094350 has been marked as a duplicate of this bug. ***
Can anyone confirm if syncing Container type repos using ISS will also fall into this RFE or if that should be a separate RFE? I know that the export feature is coming with https://projects.theforeman.org/issues/35247 but my specific request is for Sync via ISS. -- Sayan