Hide Forgot
Description of problem: If I have an organization with Library > Dev1 > QA1 > GA1 environments and a system registered in the GA1 environment, assuming that I have only promoted my custom content to Dev1, the web ui should not let me subscribe to that content if my system is not registered to the Dev1 environment. Version-Release number of selected component (if applicable): * candlepin-0.5.22-1.el6.noarch * candlepin-tomcat6-0.5.22-1.el6.noarch * katello-0.1.300-1.el6.noarch * katello-all-0.1.300-1.el6.noarch * katello-certs-tools-1.0.2-2.el6.noarch * katello-cli-0.1.100-2.el6.noarch * katello-cli-common-0.1.100-2.el6.noarch * katello-common-0.1.300-1.el6.noarch * katello-configure-0.1.100-7.el6.noarch * katello-glue-candlepin-0.1.300-1.el6.noarch * katello-glue-foreman-0.1.300-1.el6.noarch * katello-glue-pulp-0.1.300-1.el6.noarch * katello-httpd-ssl-key-pair-1.0-1.noarch * katello-qpid-broker-key-pair-1.0-1.noarch * katello-repos-0.1.5-1.el6.noarch * katello-selinux-0.1.7-1.el6.noarch * katello-trusted-ssl-cert-1.0-1.noarch * pulp-0.0.267-2.el6.noarch * pulp-admin-0.0.267-2.el6.noarch * pulp-client-lib-0.0.267-2.el6.noarch * pulp-common-0.0.267-2.el6.noarch * pulp-selinux-server-0.0.267-2.el6.noarch How reproducible: Steps to Reproduce: 1. Created org with Library > Dev1 > QA1 > GA1 environments 2. Added provider, synced custom content and promoted it to Dev1 3. Register a system using --environment GA1 4. Through the web ui, select your system from Systems and click the Subscription tab Actual results: I see my content available for subscription but imho, if its content hasn't been promoted to GA1, I should not be able to subscribe to it. subscription-manager though seems to know not to use that content Expected results: Additional info:
Looks like they fixed the SM side but forgot the local UI. SM side fix: https://bugzilla.redhat.com/show_bug.cgi?id=740874 Not quite sure how this happens, I would think the available subs list comes from candlepin either way.
Bz 740874 solved the problem at content level, so that the content (repositories) were put into redhat.repo without being promoted. This issue however is at subscriptions level. @Jeff you are right, they come from CP. @Devan: what do you think about not offering products fro subscription that have no content in the consumer environment? I don't thing this is a blocker, but might be a bit misleading.
Technical note added. If any revisions are required, please edit the "Technical Notes" field accordingly. All revisions will be proofread by the Engineering Content Services team. New Contents: "If a machine is registered to an environment where content has not yet been promoted, it can still consume subscriptions. When the content is promoted to that environment, the entitlement certificates will be regenerated and the content will become available"
Library -> Dev -> QA -> GA When the content had been promoted to Dev, yum repolist showed nothing. [root@xxxx yum.repos.d]# subscription-manager register --user admin --password admin --consumerid=55d5b324-2dc0-4457-afc6-43296ce14fbc The system has been registered with id: 55d5b324-2dc0-4457-afc6-43296ce14fbc [root@xxxxxx yum.repos.d]# yum repolistLoaded plugins: product-id, security, subscription-manager Updating certificate-based repositories. repolist: 0 Upon successfully promoting it to GA env path, [root@xxxxx yum.repos.d]# yum repolist Loaded plugins: product-id, security, subscription-manager Updating certificate-based repositories. ACME_Corporation_Fedora16_fed16 | 3.4 kB 00:00 repo id repo name status ACME_Corporation_Fedora16_fed16 fed16 3,107 repolist: 3,107
The Technical notes mentioned needs to be added under appropriate CFSE section. Most probably under section 3.1.1 of Release Notes.
Doc update will occur for 1.1. Release note to occur for 1.0. LKB
Release Note added. Link: http://documentation-stage.bne.redhat.com/docs/en-US/CloudForms/1.0/html-single/Release_Notes/index.html#sect-Release_Notes-System_Engine-System_Engine_Considerations-known_issues_17 Regards, Shikha
Back to assigned for doc update. LKB
Hi All, This information has been added to the System Engine User guide as an admonition. Please review this section: http://documentation-stage-02.lab.eng.bne.redhat.com/docs/en-US/CloudForms/1.1/html/System_Engine_User_Guide/Promoting_a_Changeset.html Regards, Shikha
Verified this defect with following CFSE build: katello-glue-candlepin-1.1.12-12.el6cf.noarch katello-qpid-client-key-pair-1.0-1.noarch katello-all-1.1.12-12.el6cf.noarch katello-cli-1.1.8-6.el6cf.noarch katello-certs-tools-1.1.8-1.el6cf.noarch katello-selinux-1.1.1-1.el6cf.noarch katello-configure-1.1.9-6.el6cf.noarch katello-candlepin-cert-key-pair-1.0-1.noarch katello-cli-common-1.1.8-6.el6cf.noarch katello-common-1.1.12-12.el6cf.noarch katello-1.1.12-12.el6cf.noarch katello-qpid-broker-key-pair-1.0-1.noarch katello-glue-pulp-1.1.12-12.el6cf.noarch case1: ===== when we register a machine to env where contents has not been promoted then: - subscriptions are available to consume - but contents won't be accessible. [root@dhcp201-152 ca]# subscription-manager register --username admin --password admin --env ga --org ACME_Corporation The system has been registered with id: 26d9bf1f-6611-4c07-a659-a63881abc40c [root@dhcp201-152 ca]# subscription-manager list --avail +-------------------------------------------+ Available Subscriptions +-------------------------------------------+ ProductName: rhel63 ProductId: 1349232597802 PoolId: 8ac149003a247dd1013a24879cf90004 Quantity: unlimited Multi-Entitlement: No Expires: 09/26/2042 MachineType: physical I subscribed this custom repo via webUI and then checked root@dhcp201-152 yum.repos.d]# subscription-manager refresh All local data refreshed [root@dhcp201-152 yum.repos.d]# subscription-manager list --avail No Available subscription pools to list [root@dhcp201-152 yum.repos.d]# subscription-manager list --consum +-------------------------------------------+ Consumed Product Subscriptions +-------------------------------------------+ ProductName: rhel63 ContractNumber: AccountNumber: SerialNumber: 3481916307840789684 Active: True QuantityUsed: 1 Begins: 10/03/2012 Expires: 09/26/2042 [root@dhcp201-152 yum.repos.d]# yum repolist Loaded plugins: product-id, security, subscription-manager Updating certificate-based repositories. repo id repo name status el6tools Red Hat Enterprise Linux Tools 25 repolist: 25
case2: ==== but later when you promote the contents to that env, entitle certs will get generated and that update redhat.repo file and then you can consume contents. I promoted the contents to 'ga' env and now contents are accessible and redhat.repo gets updated with entitle certs. [root@dhcp201-152 yum.repos.d]# subscription-manager refresh All local data refreshed [root@dhcp201-152 yum.repos.d]# yum repolist Loaded plugins: product-id, security, subscription-manager Updating certificate-based repositories. ACME_Corporation_rhel63_rhel63_64 | 3.7 kB 00:00 ACME_Corporation_rhel63_rhel63_64/primary_db | 3.1 MB 00:00 repo id repo name status ACME_Corporation_rhel63_rhel63_64 rhel63_64 3,585 el6tools Red Hat Enterprise Linux Tools 25 repolist: 3,610
As per comment 13, following note is added to System Engine user guide: - If a machine is registed to an environment where content has not yet been promoted, it can still consume subscriptions. When the content is promoted to that environment, the entitlement certificates will be regenerated and the content will become available"
This documentation has now been dropped to translation ahead of publication. For any further issues, please open a new a bug. LKB
This document is now publicly available on access.redhat.com. For any further issues, please raise a new bug. LKB