Red Hat Satellite engineering is moving the tracking of its product development work on Satellite to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "Satellite project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs will be migrated starting at the end of May. If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "Satellite project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/SAT-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 797242 - Don't let client subscribe to content that has not been promoted to its environment
Summary: Don't let client subscribe to content that has not been promoted to its envir...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Docs User Guide
Version: 6.0.0
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: Unspecified
Assignee: Lana Brindley
QA Contact: Sachin Ghai
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-02-24 16:39 UTC by Og Maciel
Modified: 2019-09-26 17:45 UTC (History)
10 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
"If a machine is registered to an environment where content has not yet been promoted, it can still consume subscriptions. When the content is promoted to that environment, the entitlement certificates will be regenerated and the content will become available"
Clone Of:
Environment:
Last Closed: 2012-12-10 22:03:16 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 805592 0 unspecified CLOSED [RFE] Filter available subscriptions 2021-02-22 00:41:40 UTC

Internal Links: 805592

Description Og Maciel 2012-02-24 16:39:09 UTC
Description of problem:

If I have an organization with Library > Dev1 > QA1 > GA1 environments and a system registered in the GA1 environment, assuming that I have only promoted my custom content to Dev1, the web ui should not let me subscribe to that content if my system is not registered to the Dev1 environment.

Version-Release number of selected component (if applicable):

* candlepin-0.5.22-1.el6.noarch
* candlepin-tomcat6-0.5.22-1.el6.noarch
* katello-0.1.300-1.el6.noarch
* katello-all-0.1.300-1.el6.noarch
* katello-certs-tools-1.0.2-2.el6.noarch
* katello-cli-0.1.100-2.el6.noarch
* katello-cli-common-0.1.100-2.el6.noarch
* katello-common-0.1.300-1.el6.noarch
* katello-configure-0.1.100-7.el6.noarch
* katello-glue-candlepin-0.1.300-1.el6.noarch
* katello-glue-foreman-0.1.300-1.el6.noarch
* katello-glue-pulp-0.1.300-1.el6.noarch
* katello-httpd-ssl-key-pair-1.0-1.noarch
* katello-qpid-broker-key-pair-1.0-1.noarch
* katello-repos-0.1.5-1.el6.noarch
* katello-selinux-0.1.7-1.el6.noarch
* katello-trusted-ssl-cert-1.0-1.noarch
* pulp-0.0.267-2.el6.noarch
* pulp-admin-0.0.267-2.el6.noarch
* pulp-client-lib-0.0.267-2.el6.noarch
* pulp-common-0.0.267-2.el6.noarch
* pulp-selinux-server-0.0.267-2.el6.noarch

How reproducible:


Steps to Reproduce:
1. Created org with Library > Dev1 > QA1 > GA1 environments
2. Added provider, synced custom content and promoted it to Dev1
3. Register a system using --environment GA1
4. Through the web ui, select your system from Systems and click the Subscription tab
  
Actual results:

I see my content available for subscription but imho, if its content hasn't been promoted to GA1, I should not be able to subscribe to it. subscription-manager though seems to know not to use that content
Expected results:


Additional info:

Comment 1 Jeff Weiss 2012-02-24 19:17:16 UTC
Looks like they fixed the SM side but forgot the local UI.
SM side fix:  
https://bugzilla.redhat.com/show_bug.cgi?id=740874

Not quite sure how this happens, I would think the available subs list comes from candlepin either way.

Comment 2 Ivan Necas 2012-03-01 09:08:32 UTC
Bz 740874 solved the problem at content level, so that the content (repositories) were put into redhat.repo without being promoted. This issue however is at subscriptions level.

@Jeff you are right, they come from CP.

@Devan: what do you think about not offering products fro subscription that have no content in the consumer environment?

I don't thing this is a blocker, but might be a bit misleading.

Comment 4 Bryan Kearney 2012-03-21 16:30:48 UTC
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
"If a machine is registered to an environment where content has not yet been promoted, it can still consume subscriptions. When the content is promoted to that environment, the entitlement certificates will be regenerated and the content will become available"

Comment 6 Kedar Bidarkar 2012-04-11 10:53:06 UTC
Library -> Dev -> QA -> GA

When the content had been promoted to Dev, yum repolist showed nothing.

[root@xxxx yum.repos.d]# subscription-manager register --user admin --password admin --consumerid=55d5b324-2dc0-4457-afc6-43296ce14fbc
The system has been registered with id: 55d5b324-2dc0-4457-afc6-43296ce14fbc 
[root@xxxxxx yum.repos.d]# yum repolistLoaded plugins: product-id, security, subscription-manager
Updating certificate-based repositories.
repolist: 0


Upon successfully promoting it to GA env path, 

[root@xxxxx yum.repos.d]# yum repolist
Loaded plugins: product-id, security, subscription-manager
Updating certificate-based repositories.
ACME_Corporation_Fedora16_fed16                          | 3.4 kB     00:00     
repo id                                           repo name               status
ACME_Corporation_Fedora16_fed16                   fed16                   3,107
repolist: 3,107

Comment 7 Kedar Bidarkar 2012-04-16 14:08:09 UTC
The Technical notes mentioned needs to be added under appropriate CFSE section.

Most probably under section 3.1.1 of Release Notes.

Comment 9 Lana Brindley 2012-05-03 04:42:17 UTC
Doc update will occur for 1.1. Release note to occur for 1.0.

LKB

Comment 11 Lana Brindley 2012-06-12 03:19:01 UTC
Back to assigned for doc update.

LKB

Comment 13 Shikha 2012-09-19 05:58:34 UTC
Hi All,
This information has been added to the System Engine User guide as an admonition. Please review this section:
http://documentation-stage-02.lab.eng.bne.redhat.com/docs/en-US/CloudForms/1.1/html/System_Engine_User_Guide/Promoting_a_Changeset.html

Regards,
Shikha

Comment 14 Sachin Ghai 2012-10-03 09:15:31 UTC
Verified this defect with following CFSE build:

katello-glue-candlepin-1.1.12-12.el6cf.noarch
katello-qpid-client-key-pair-1.0-1.noarch
katello-all-1.1.12-12.el6cf.noarch
katello-cli-1.1.8-6.el6cf.noarch
katello-certs-tools-1.1.8-1.el6cf.noarch
katello-selinux-1.1.1-1.el6cf.noarch
katello-configure-1.1.9-6.el6cf.noarch
katello-candlepin-cert-key-pair-1.0-1.noarch
katello-cli-common-1.1.8-6.el6cf.noarch
katello-common-1.1.12-12.el6cf.noarch
katello-1.1.12-12.el6cf.noarch
katello-qpid-broker-key-pair-1.0-1.noarch
katello-glue-pulp-1.1.12-12.el6cf.noarch

case1:
=====
when we register a machine to env where contents has not been promoted then:

- subscriptions are available to consume
- but contents won't be accessible.

[root@dhcp201-152 ca]# subscription-manager register --username admin --password admin --env ga --org ACME_Corporation
The system has been registered with id: 26d9bf1f-6611-4c07-a659-a63881abc40c 

[root@dhcp201-152 ca]# subscription-manager list --avail
+-------------------------------------------+
    Available Subscriptions
+-------------------------------------------+


ProductName:       	rhel63                   
ProductId:         	1349232597802            
PoolId:            	8ac149003a247dd1013a24879cf90004
Quantity:          	unlimited                
Multi-Entitlement: 	No                       
Expires:           	09/26/2042               
MachineType:       	physical                 

I subscribed this custom repo via webUI and then checked


root@dhcp201-152 yum.repos.d]# subscription-manager refresh
All local data refreshed
[root@dhcp201-152 yum.repos.d]# subscription-manager list --avail
No Available subscription pools to list
[root@dhcp201-152 yum.repos.d]# subscription-manager list --consum
+-------------------------------------------+
    Consumed Product Subscriptions
+-------------------------------------------+


ProductName:        	rhel63                   
ContractNumber:     	                         
AccountNumber:      	                         
SerialNumber:       	3481916307840789684      
Active:             	True                     
QuantityUsed:       	1                        
Begins:             	10/03/2012               
Expires:            	09/26/2042               

[root@dhcp201-152 yum.repos.d]# yum repolist
Loaded plugins: product-id, security, subscription-manager
Updating certificate-based repositories.
repo id                   repo name                                       status
el6tools                  Red Hat Enterprise Linux Tools                  25
repolist: 25

Comment 15 Sachin Ghai 2012-10-03 09:17:28 UTC
case2:
====
but later when you promote the contents to that env, entitle certs will get generated and that update redhat.repo file and then you can consume contents.

I promoted the contents to 'ga' env and now contents are accessible and redhat.repo  gets updated with entitle certs.

 
[root@dhcp201-152 yum.repos.d]# subscription-manager refresh
All local data refreshed
[root@dhcp201-152 yum.repos.d]# yum repolist
Loaded plugins: product-id, security, subscription-manager
Updating certificate-based repositories.
ACME_Corporation_rhel63_rhel63_64                        | 3.7 kB     00:00     
ACME_Corporation_rhel63_rhel63_64/primary_db             | 3.1 MB     00:00     
repo id                               repo name                           status
ACME_Corporation_rhel63_rhel63_64     rhel63_64                           3,585
el6tools                              Red Hat Enterprise Linux Tools         25
repolist: 3,610

Comment 16 Sachin Ghai 2012-10-03 09:20:57 UTC
As per comment 13, following note is added to System Engine user guide: 

-
If a machine is registed to an environment where content has not yet been promoted, it can still consume subscriptions. When the content is promoted to that environment, the entitlement certificates will be regenerated and the content will become available"

Comment 17 Lana Brindley 2012-11-19 02:55:00 UTC
This documentation has now been dropped to translation ahead of publication. For any further issues, please open a new a bug.

LKB

Comment 18 Lana Brindley 2012-12-10 22:03:16 UTC
This document is now publicly available on access.redhat.com. For any further issues, please raise a new bug.

LKB


Note You need to log in before you can comment on or make changes to this bug.