Note: This bug is displayed in read-only format because
the product is no longer active in Red Hat Bugzilla.
Red Hat Satellite engineering is moving the tracking of its product development work on Satellite to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "Satellite project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs will be migrated starting at the end of May. If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "Satellite project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/SAT-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Description of problem:
NOTE: analysis on this bug is inprogress, the component is likely not correct at the time of filing.
When building and deploying RHEL-6 images from katello hosted CDN content, the deployed images are missing a product cert (/etc/pki/product/69.pem). Because this file is missing, the images are unable to download RHEL content. My understanding is that the product cert (/etc/pki/product/69.pem) file is expected to be missing on ec2 deployments, since ec2 deployments should be using RHUI for content. However, for private cloud deployments (RHEV or vSphere), the lack of a product cert (/etc/pki/product/69.pem) means that deployments cannot consume updates/errata from katello.
Version-Release number of selected component (if applicable):
* katello-0.1.306-1.el6.src.rpm
* katello-candlepin-cert-key-pair-1.0-1.src.rpm
* katello-certs-tools-1.0.4-1.el6.src.rpm
* katello-cli-0.1.107-1.el6.src.rpm
* katello-configure-0.1.104-1.el6.src.rpm
* katello-qpid-broker-key-pair-1.0-1.src.rpm
* katello-qpid-client-key-pair-1.0-1.src.rpm
* katello-selinux-0.1.8-1.el6.src.rpm
* pulp-1.0.0-8.el6.src.rpm
How reproducible:
* All RHEL6 deployments using CDN content are unable to receive content updates
Steps to Reproduce:
1. Prepare a system engine environment
* Import access.qa.redhat.com MANIFEST
* Sync
* Promote content to 'Dev' environment
2. Create, promote and export a RHEL6 x86_64 system template
3. Import, build and deploy an image using a system template through Cloud Engine to RHEV or vSphere
Actual results:
There is no /etc/pki/product/69.pem file on installed system. Therefore, while the system can register and subscribe to katello repos, it *cannot* consume content from them.
Expected results:
/etc/pki/product/69.pem needs to be a valid RHEL product cert
Additional info:
* I see /mnt/sysimage/etc/pki/product/69.pem exists after the image is build/installed
* I see /etc/pki/product/69.pem exists when the image is booted for customization
* After deployment, /etc/pki/product/69.pem does not exist on the system
* Somewhere between image push and deployment, the product cert is being removed.