Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-7192

[RFE] Refreshing subscription-manager should remove subscription if SCA is enabled.

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • None
    • subs-client-tools
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Enhancement
    • None
    • 57,005

      +++ This bug was initially created as a clone of Bug #2124276 +++

      Description of problem:

      Enabling SCA should remove subscription from host after certain interval or by initiating # subscription-manager refresh command.

      Version-Release number of selected component (if applicable):

      Red Hat Satellite 6.12.

      How reproducible: Always

      Steps to Reproduce:

      1. Attach a subscription to the host.
      2. Enable SCA on Satellite Organization.
      3. The subscription is still attached to the host.

      1. subscription-manager list --consumed

      Actual results:

      • Host is still showing attached subscription when executing # subscription-manager list --consumed command.

      Expected results:

      • The subscription should be removed automatically or by refreshing subscription-manager with # subscription-manager refresh command.

      Additional info:

      As of Candlepin v4.3.3, the existing regenerate consumer entitlements endpoint [1] supports a new query param, "cleanup_entitlements" which will trigger the removal of unused entitlements prior to certificate regeneration. If the consumer is operating in SCA mode, this will revoke all of their individual entitlements before regenerating the SCA certificate. Providing this query parameter to an earlier version of Candlepin will have no effect, and it will be silently ignored.

      If that option is not viable, all supported Candlepin versions have a general "revoke all entitlements" endpoint [2] that could be used instead, if the client is willing to perform a second request during the refresh op.

      [1] PUT /candlepin/consumers/

      {consumer_uuid}/certificates
      [2] DELETE /candlepin/consumers/{consumer_uuid}

      /entitlements

              candlepin-bugs candlepin-bugs
              rh-crog Christopher Rog
              candlepin-bugs candlepin-bugs
              RH Bugzilla Integration RH Bugzilla Integration
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

                Created:
                Updated: