We have bad builds tomcat-9.0.62-12.el8 and tomcat-9.0.62-10.el8 in which add "obsoletes/provides pki-servlet-engine", they broke rhel-8.9.0. tomcat-9.0.62-14.el8_9 reverted the change, but candlepin was still broken by the new build conflicting with the old build:
Problem: package candlepin-4.3.1-1.el8.noarch requires pki-servlet-engine, but none of the providers can be installed
  - package tomcat-1:9.0.62-14.el8.noarch conflicts with pki-servlet-engine <= 1:9.0.50 provided by tomcat-1:9.0.62-12.el8.noarch
After untagging them from rhel-8.9.0-candidate, the broken issue is resolved for rhel-8. 
But they have been tagged into c8s-candidate and c8s-released in CentOS Stream. I think they should be untagged in CentOS Stream.
 
Thanks,
Hui