This bug has been migrated to another issue tracking site. It has been closed here and may no longer be being monitored.

If you would like to get updates for this issue, or to participate in it, you may do so at Red Hat Issue Tracker .
Red Hat Satellite engineering is moving the tracking of its product development work on Satellite to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "Satellite project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs will be migrated starting at the end of May. If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "Satellite project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/SAT-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 2124276 - [RFE] Refreshing subscription-manager should remove subscription if SCA is enabled.
Summary: [RFE] Refreshing subscription-manager should remove subscription if SCA is en...
Keywords:
Status: CLOSED MIGRATED
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Candlepin
Version: 6.12.0
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: stream
Assignee: Barnaby Court
QA Contact: Satellite QE Team
URL:
Whiteboard:
Depends On:
Blocks: 2188073 2189475
TreeView+ depends on / blocked
 
Reported: 2022-09-05 13:48 UTC by Rohit Rajput
Modified: 2024-10-05 04:25 UTC (History)
8 users (show)

Fixed In Version: candlepin-4.3.5-1
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 2188073 (view as bug list)
Environment:
Last Closed: 2024-06-06 12:30:36 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github candlepin candlepin pull 3954 0 None Merged [M] CANDLEPIN-557: Added support for entitlement cleanup in SCA mode 2023-10-05 12:02:47 UTC
Github candlepin candlepin pull 3984 0 None Merged [M] CANDLEPIN-557: Fixed content access mode resolution for consumers 2023-10-05 12:02:47 UTC
Red Hat Issue Tracker   SAT-20244 0 None Migrated None 2024-06-06 12:30:35 UTC

Description Rohit Rajput 2022-09-05 13:48:01 UTC
Description of problem:

Enabling SCA should remove subscription from host after certain interval or by initiating # subscription-manager refresh command.

Version-Release number of selected component (if applicable):

Red Hat Satellite 6.12.

How reproducible: Always


Steps to Reproduce:

1. Attach a subscription to the host.
2. Enable SCA on Satellite Organization.
3. The subscription is still attached to the host.

# subscription-manager list --consumed


Actual results:

- Host is still showing attached subscription when executing # subscription-manager list --consumed command.

Expected results:

- The subscription should be removed automatically or by refreshing subscription-manager with # subscription-manager refresh command.

Additional info:

NA

Comment 1 Chris "Ceiu" Rog 2023-04-11 17:45:16 UTC
Can you provide some additional context? Specifically:

1. what about the listing consumed pools is problematic?
2. are we at all concerned about the case of an org moving from entitlement -> SCA -> entitlement?
3. does such a feature need to be backward compatible with all existing clients, or could this be a case where existing clients function as they do, and newer clients remove them on refresh?


While this RFE seems simple on the surface, there are some underlying design choices and limitations which pose problems. Namely, some organizations are large enough that a massive revocation could take 10+ minutes and stall out the response time on the initial switch to SCA. Doing it on a per-system basis when "subscription-manager refresh" is invoked is definitely more approachable from a response time standpoint, but has design limitations in that an existing, shared endpoint will inherit unrelated and, perhaps, unexpected behavior [1]. We can work around that by adding a parameter or a new endpoint for this cleanup, but then the client would need to be updated to invoke it as appropriate.

We have other options in terms of how to approach such a feature, but we would like to know more about the issues encountered that are driving this request before we design and implement something that may not work as users want or expect.



[1] In terms of client communication with Candlepin, currently subman refresh only invokes the "fetch certificates" operation, which, if the RFE were implemented exactly as worded today, would also revoke/delete entitlements for the system if the system's org is operating in SCA mode. Callers would need to be aware of this side effect; which would be strange for a GET request for certificates to perform, even with explicit documentation.

Comment 3 Brad Buckingham 2023-10-04 21:43:14 UTC
Upon review of our valid but aging backlog the Satellite Team has concluded that this Bugzilla does not meet the criteria for a resolution in the near term, and are planning to close in a month. This message may be a repeat of a previous update and the bug is again being considered to be closed. If you have any concerns about this, please contact your Red Hat Account team.  Thank you.

Comment 4 Nikos Moumoulidis 2023-10-05 11:59:54 UTC
This has actually been implemented on the Candlepin side, but our automation did not catch/update the BZ.
For this to work however, the client side (subscription-manager) also needs changes. You can track that work by following the 2 'blocks' BZ links,
and from there, follow the jira links (since RHEL has moved to using jira now):
https://issues.redhat.com/browse/RHEL-7192
https://issues.redhat.com/browse/RHEL-7195

Comment 6 Brad Buckingham 2023-11-02 17:06:37 UTC
Based upon feedback during auto-closure, leaving this bugzilla open a while longer for additional investigation; however, it may be closed in a future iteration.

Comment 8 Eric Helms 2024-06-06 12:30:36 UTC
This BZ has been automatically migrated to the issues.redhat.com Red Hat Issue Tracker. All future work related to this report will be managed there.

Due to differences in account names between systems, some fields were not replicated.  Be sure to add yourself to Jira issue's "Watchers" field to continue receiving updates and add others to the "Need Info From" field to continue requesting information.

To find the migrated issue, look in the "Links" section for a direct link to the new issue location. The issue key will have an icon of 2 footprints next to it, and begin with "SAT-" followed by an integer.  You can also find this issue by visiting https://issues.redhat.com/issues/?jql= and searching the "Bugzilla Bug" field for this BZ's number, e.g. a search like:

"Bugzilla Bug" = 1234567

In the event you have trouble locating or viewing this issue, you can file an issue by sending mail to rh-issues. You can also visit https://access.redhat.com/articles/7032570 for general account information.

Comment 9 Red Hat Bugzilla 2024-10-05 04:25:27 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days


Note You need to log in before you can comment on or make changes to this bug.