Description of problem: NOTE: analysis on this bug is inprogress, the component is likely not correct at the time of filing. When building and deploying RHEL-6 images from katello hosted CDN content, the deployed images are missing a product cert (/etc/pki/product/69.pem). Because this file is missing, the images are unable to download RHEL content. My understanding is that the product cert (/etc/pki/product/69.pem) file is expected to be missing on ec2 deployments, since ec2 deployments should be using RHUI for content. However, for private cloud deployments (RHEV or vSphere), the lack of a product cert (/etc/pki/product/69.pem) means that deployments cannot consume updates/errata from katello. Version-Release number of selected component (if applicable): * katello-0.1.306-1.el6.src.rpm * katello-candlepin-cert-key-pair-1.0-1.src.rpm * katello-certs-tools-1.0.4-1.el6.src.rpm * katello-cli-0.1.107-1.el6.src.rpm * katello-configure-0.1.104-1.el6.src.rpm * katello-qpid-broker-key-pair-1.0-1.src.rpm * katello-qpid-client-key-pair-1.0-1.src.rpm * katello-selinux-0.1.8-1.el6.src.rpm * pulp-1.0.0-8.el6.src.rpm How reproducible: * All RHEL6 deployments using CDN content are unable to receive content updates Steps to Reproduce: 1. Prepare a system engine environment * Import access.qa.redhat.com MANIFEST * Sync * Promote content to 'Dev' environment 2. Create, promote and export a RHEL6 x86_64 system template 3. Import, build and deploy an image using a system template through Cloud Engine to RHEV or vSphere Actual results: There is no /etc/pki/product/69.pem file on installed system. Therefore, while the system can register and subscribe to katello repos, it *cannot* consume content from them. Expected results: /etc/pki/product/69.pem needs to be a valid RHEL product cert Additional info: * I see /mnt/sysimage/etc/pki/product/69.pem exists after the image is build/installed * I see /etc/pki/product/69.pem exists when the image is booted for customization * After deployment, /etc/pki/product/69.pem does not exist on the system * Somewhere between image push and deployment, the product cert is being removed.
installation of https://qeblade30.rhq.lab.eng.bos.redhat.com/pub/candlepin-cert-consumer-qeblade30.rhq.lab.eng.bos.redhat.com-1.0-1.noarch.rpm removes the 69.pem file
ah.. maybe not the rpm.. could be the yum product-id plugin.. that is called
https://bugzilla.redhat.com/show_bug.cgi?id=806457 *** This bug has been marked as a duplicate of bug 806457 ***