Description of problem: We can see this behavior in different customers, also, we can see the same in our lab servers. Version-Release number of selected component (if applicable): All of them, 6.x How reproducible: 100% Steps to Reproduce: 1. Install satellite 2. Import manifest and enable/sync repos 3. Let pass some days 4. Eventually, when trying to enable a new repo, it doesn't work. Actual results: The list of repos it's blank and in the logs, we can see Forbidden message Expected results: The repo list available Additional info:
Hello, Thank you for your analysis. That said, do you believe katello should be checking this information/difference and in case of affirmative, katello itself should be doing this refresh automatically? Or Candlepin would be able to handle this by itself? Thank you! Waldirio
The root cause for this is that a one-time action was performed in Hosted Candlepin on the 25th of October to regenerate ALL manifest consumer entitlement certificates, as an additional mitigation for the fix for this bug: https://bugzilla.redhat.com/show_bug.cgi?id=2131312 The side effect was that all manifests in satellite instances have to be refreshed. Closing this as not a bug. If you hit this problem: Performing a one-time workaround of refreshing your manifest should fix it, and it should not happen again.