Bug 2110222 - Insights client traffic through a Satellite 6.11 Capsule fails
Summary: Insights client traffic through a Satellite 6.11 Capsule fails
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Installation
Version: 6.11.0
Hardware: Unspecified
OS: Unspecified
high
urgent
Target Milestone: 6.12.0
Assignee: Eric Helms
QA Contact: Gaurav Talreja
URL:
Whiteboard:
: 2108402 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-07-24 16:51 UTC by Satyajit Das
Modified: 2023-11-29 04:25 UTC (History)
14 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 2112386 (view as bug list)
Environment:
Last Closed: 2022-11-16 13:34:44 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Foreman Issue Tracker 35278 0 Normal Closed Insights client traffic through a Satellite 6.11 Capsule fails 2022-07-28 14:02:51 UTC
Github theforeman puppet-foreman_proxy_content pull 423 0 None Merged Fixes #35278: Add Red Hat Insights path to reverse proxy URLs 2022-07-28 14:02:52 UTC
Red Hat Issue Tracker SAT-12738 0 None None None 2022-09-06 01:05:24 UTC
Red Hat Product Errata RHSA-2022:8506 0 None None None 2022-11-16 13:35:05 UTC

Description Satyajit Das 2022-07-24 16:51:48 UTC
Description of problem:

insights-client --test-connection fails when registered to external Capsule.


Version-Release number of selected component (if applicable):

-  Satellite Server v6.11
-  external Capsule Server v.611
-  RHEL 8.6 host, provisioned by PXE/kickstart 


How reproducible:

100%


Steps to Reproduce:

1. Register a client to external Capsule using the Global Registration Template ( Under Advanced section=> Setup Insights = yes )
2. Host registered successfully to the external capsule.

Actual results:

Insight client fails to establish the connection with the external capsule.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
GET https://capsule.example.com:443/redhat_access/r/insights/v1/branch_info   
HTTP Status: 404 Not Found
HTTP Response Text: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
</body></html>

Running Connection Tests...
=== Begin Upload URL Connection Test ===
Testing: https://capsule.example.com:443/redhat_access/r/insights/uploads/
POST https://capsule.example.com:443/redhat_access/r/insights/uploads/
HTTP Status: 404 Not Found
HTTP Response Text: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
</body></html>

Connection failed
=== End Upload URL Connection Test: FAILURE ===

=== Begin API URL Connection Test ===
Testing: https://capsule.example.com:443/redhat_access/r/insights/
GET https://capsule.example.com:443/redhat_access/r/insights/
HTTP Status: 404 Not Found
HTTP Response Text: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
</body></html>

Connection failed

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Expected results:

The test connection fails with a 404 error.


Additional info:

- Tried to register the host manually as well as using  "Global Registration Template" and found the same behavior.

Workaround:-

Execute the command on the client to update the port:-

# subscription-manager config --server.port=8443

Comment 2 Eric Helms 2022-07-25 16:26:46 UTC
Satellite 6.11 introduced port 443 on Capsule's as the default port for client connections, 8443 is deprecated and will be removed in future releases. This appears that there is something about the Insights client traffic not getting properly proxied on 443 and needs some further investigation.

Comment 3 Eric Helms 2022-07-26 01:05:08 UTC
Created redmine issue https://projects.theforeman.org/issues/35278 from this bug

Comment 4 Bryan Kearney 2022-07-26 04:05:19 UTC
Upstream bug assigned to ehelms

Comment 5 Bryan Kearney 2022-07-26 04:05:21 UTC
Upstream bug assigned to ehelms

Comment 6 Sam Bible 2022-08-01 18:26:51 UTC
Verified reproducible on demand, using the setup mentioned in the original comment modified to use a normal RHEL 8.6 host. 

Running Connection Tests...
=== Begin Upload URL Connection Test ===
Testing: https://dhcp-2-149.vms.sat.rdu2.redhat.com:443/redhat_access/r/insights/uploads/
POST https://dhcp-2-149.vms.sat.rdu2.redhat.com:443/redhat_access/r/insights/uploads/
HTTP Status: 404 Not Found
HTTP Response Text: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
</body></html>

Comment 13 Gaurav Talreja 2022-09-29 11:18:40 UTC
Eric,

I have uploaded this manifest manually into this machine into the Default Organization, but when I check now it was unloaded somehow as you mentioned, and when I uploaded manifest back there, tried registering a client against a external capsule, which installs/configures insights-client to successfully establish a connection with the external capsule, thought we hit this BZ 2129254 while registering same as Satellite 

Thus, I confirm the setup error and move this BZ as verified.

Thanks
Gaurav

Comment 17 errata-xmlrpc 2022-11-16 13:34:44 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: Satellite 6.12 Release), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:8506

Comment 18 Eric Helms 2023-07-31 13:29:41 UTC
*** Bug 2108402 has been marked as a duplicate of this bug. ***

Comment 19 Red Hat Bugzilla 2023-11-29 04:25:03 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days


Note You need to log in before you can comment on or make changes to this bug.