Description of problem:

The customer was unable to enable any of the Satellite 6.17 repositories on their Satellite server. When attempting to enable the repositories via the Satellite Web UI, the following error was displayed:

403, message='Forbidden', url='https://cdn.redhat.com/content/dist/layered/rhel9/x86_64/satellite/6.17/os'

Logs from /var/log/foreman/production.log showed:

Katello::Errors::SecurityViolation: CDN loading error: access forbidden to }}{{https://cdn.redhat.com:443/content/dist/layered/rhel9/x86_64/sat-maintenance/6.17/os/repodata/repomd.xml
Katello::Errors::SecurityViolation: CDN loading error: access forbidden to }}{{https://cdn.redhat.com:443/content/dist/layered/rhel9/x86_64/satellite/6.17/os/repodata/repomd.xml

How reproducible:

It is only customer issue, I was not able to reproduce the issue in my VM.

Is this issue a regression from an earlier version:

No

 
Troubleshooting Performed: * Refreshed the customer's subscription pool.

• Refreshed the subscription manifest on the Satellite.
• Tested repository access manually using the manifest certificate:

We resolved the issue by asking the customer to remove and re-add the "Satellite Infrastructure Subscription" from their manifest. After re-adding, the repositories became accessible, and the issue was resolved.

Business Impact / Additional info:

Customer was not able to enable the satellite 6.17 repos on his master satellite to upgrade other satellites.

The manifests before and after fix are attached.