Bug 2090466 - Satellite does not follow http redirects received by the cdn URL while trying to load the list of Red Hat Repositories
Summary: Satellite does not follow http redirects received by the cdn URL while trying...
Keywords:
Status: ASSIGNED
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Repositories
Version: 6.10.5
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: Unspecified
Assignee: Chris Roberts
QA Contact: Satellite QE Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-05-25 19:53 UTC by Joniel Pasqualetto
Modified: 2023-07-15 00:27 UTC (History)
9 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2022-06-13 19:37:04 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Foreman Issue Tracker 35037 0 Normal Ready For Testing Add redhat_repository_url to puppet-katello 2023-02-17 11:28:35 UTC
Github theforeman puppet-katello pull 452 0 None closed Fixes #35037 - Add redhat_repository_url to puppet-katello 2023-02-17 11:28:45 UTC
Red Hat Issue Tracker SAT-10654 0 None None None 2023-02-03 13:46:30 UTC
Red Hat Knowledge Base (Solution) 6962982 0 None None None 2022-06-13 19:36:03 UTC

Description Joniel Pasqualetto 2022-05-25 19:53:55 UTC
Description of problem:

When loading the list of Red Hat Repositories (Content -> Red Hat Repositories), Satellite won't follow redirects.


Version-Release number of selected component (if applicable):


How reproducible:

Always, when the cdn url sends a redirect

Steps to Reproduce:
1. Modify the CDN url to http://cdn.redhat.com (note the HTTP, not HTTPS)
2. Go to Content -> Red Hat Repositories. Try expanding any repository know to have multiple options to be enabled. Nothing will be loaded.

Actual results:
Redirects are not followed and users can't enable repositories.

Expected results:
http redirects to be followed.

Additional info:

Comment 4 Partha Aji 2022-05-27 20:20:28 UTC
Connecting redmine issue https://projects.theforeman.org/issues/34983 from this bug

Comment 5 Bryan Kearney 2022-05-28 00:04:28 UTC
Upstream bug assigned to paji

Comment 6 Bryan Kearney 2022-05-28 00:04:30 UTC
Upstream bug assigned to paji

Comment 10 Chris Roberts 2022-06-13 19:37:04 UTC
Hi,

This BZ can be fixed by following the steps in the Red Hat KCS below:

https://access.redhat.com/solutions/6962982

Closing this as CLOSED-CURRENTRELEASE

Comment 13 Sayan Das 2023-02-13 15:29:05 UTC
Based on the discussion with the engineer from case 03426678, I am reopening this Bugzilla. 

Since this was never really fixed in the product but worked around, I believe we need more investigation to be done here. 

These are the questions raised by the case engineer to me :

A) Why 6.11 is working for the end-user but not 6.12 ? ( any specific change in katello is not allowing the workaround to do its job ?? )

B) Who is responsible for redirecting https://cdn.redhat.com to https://ru-by-exceptions.cdn.redhat.com ?

   --> If it's RedHat, then what is the exact necessity of the same?

           --> The RU-BY exceptions had ended quite some time back 


C) Is there a product-level permanent fix we can suggest to the customer?

D) If C is false then What sort of data would be required from the customer to investigate this issue going forward and find out a viable solution ?




-- Sayan

Comment 14 Sayan Das 2023-02-13 16:47:34 UTC
JFYI, As the end-user was not experiencing the exact same issue as before but rather, it seems like manifest certs are not allowing access to the content hosted in ru-by cdn mirror, we decided to treat it as simple "403 forbidden" scenario, and go for a manifest refresh.

I have additionally requested them to refresh the pulp repos in Library env i.e. foreman-rake katello:refresh_pulp_repo_details LIFECYCLE_ENVIRONMENT=Library 

Let's see if that results in any positive outcome ..

Comment 15 Bryan Kearney 2023-02-16 16:02:40 UTC
Upstream bug assigned to chrobert

Comment 16 Bryan Kearney 2023-02-16 16:02:43 UTC
Upstream bug assigned to chrobert


Note You need to log in before you can comment on or make changes to this bug.