-
Bug
-
Resolution: Done
-
Critical
-
6.18.0
-
8
-
False
-
rubygem-foreman_maintain-1.13.6, foreman-installer-3.17.0-0.1.develop.20250930130416git55c6d3d
-
Satellite Rocket Sprint 6, Satellite Rocket Sprint 7
-
sat-rocket
-
None
-
None
-
Rejected
-
None
On Satellite 6.18, disabling the IOP does not remove IOP-related services; they still appear on the satellite server.
Steps to Reproduce:
- Configure Satellite 6.18 and enable IOP.
- Attempt to disable IOP.
- Observe that IOP-related services still appear.
[root@satellite ~]# satellite-installer --no-enable-iop 2025-09-12 18:41:28 [NOTICE] [root] Loading installer configuration. This will take some time. 2025-09-12 18:41:31 [NOTICE] [root] Running installer with log-based terminal output at level NOTICE. 2025-09-12 18:41:31 [NOTICE] [root] Use -l to set the terminal output log level to ERROR, WARN, NOTICE, INFO, or DEBUG. See --full-help for definitions. 2025-09-12 18:41:32 [NOTICE] [checks] System checks passed Package versions are locked. Continuing with unlock. 2025-09-12 18:41:37 [NOTICE] [configure] Starting system configuration. 2025-09-12 18:41:46 [NOTICE] [configure] 250 configuration steps out of 1544 steps complete. 2025-09-12 18:41:46 [NOTICE] [configure] 500 configuration steps out of 1547 steps complete. 2025-09-12 18:41:51 [NOTICE] [configure] 750 configuration steps out of 1549 steps complete. 2025-09-12 18:41:51 [NOTICE] [configure] 1000 configuration steps out of 1555 steps complete. 2025-09-12 18:41:51 [NOTICE] [configure] 1250 configuration steps out of 1555 steps complete. 2025-09-12 18:42:38 [NOTICE] [configure] 1500 configuration steps out of 1555 steps complete. 2025-09-12 18:42:41 [NOTICE] [configure] System configuration has finished. Success! * Satellite is running at https://satellite.example.com * To install an additional Capsule on separate machine continue by running: capsule-certs-generate --foreman-proxy-fqdn "$CAPSULE" --certs-tar "/root/$CAPSULE-certs.tar" * Capsule is running at https://satellite.example.com:9090 The full log is at /var/log/foreman-installer/satellite.log Package versions are being locked. [root@satellite ~]# satellite-maintain service status -b Running Status Services ================================================================================ Get status of applicable services: Displaying the following service(s): redis, postgresql, iop-core-engine, iop-core-gateway, iop-core-host-inventory, iop-core-host-inventory-api, iop-core-host-inventory-migrate, iop-core-ingress, iop-core-kafka, iop-core-puptoo, iop-core-yuptoo, iop-service-advisor-backend-api, iop-service-advisor-backend-service, iop-service-remediations-api, iop-service-vmaas-reposcan, iop-service-vmaas-webapp-go, iop-service-vuln-evaluator-recalc, iop-service-vuln-evaluator-upload, iop-service-vuln-grouper, iop-service-vuln-listener, iop-service-vuln-taskomatic, pulpcore-api, pulpcore-content, pulpcore-worker@1.service, pulpcore-worker@2.service, pulpcore-worker@3.service, pulpcore-worker@4.service, tomcat, dynflow-sidekiq@orchestrator, foreman, httpd, dynflow-sidekiq@worker-1, dynflow-sidekiq@worker-hosts-queue-1, foreman-proxy - displaying redis [OK] \ displaying postgresql [OK] | displaying iop-core-engine [OK] | displaying iop-core-gateway [OK] | displaying iop-core-host-inventory [FAIL] | displaying iop-core-host-inventory-api [OK] | displaying iop-core-host-inventory-migrate [FAIL] | displaying iop-core-ingress [OK] | displaying iop-core-kafka [OK] | displaying iop-core-puptoo [OK] | displaying iop-core-yuptoo [OK] | displaying iop-service-advisor-backend-api [FAIL] | displaying iop-service-advisor-backend-service [OK] | displaying iop-service-remediations-api [FAIL] | displaying iop-service-vmaas-reposcan [OK] | displaying iop-service-vmaas-webapp-go [FAIL] | displaying iop-service-vuln-evaluator-recalc [FAIL] | displaying iop-service-vuln-evaluator-upload [FAIL] | displaying iop-service-vuln-grouper [OK] | displaying iop-service-vuln-listener [FAIL] | displaying iop-service-vuln-taskomatic [FAIL] | displaying pulpcore-api [OK] | displaying pulpcore-content [OK] | displaying pulpcore-worker@1.service [OK] | displaying pulpcore-worker@2.service [OK] | displaying pulpcore-worker@3.service [OK] | displaying pulpcore-worker@4.service [OK] | displaying tomcat [OK] | displaying dynflow-sidekiq@orchestrator [OK] | displaying foreman [OK] | displaying httpd [OK] | displaying dynflow-sidekiq@worker-1 [OK] | displaying dynflow-sidekiq@worker-hosts-queue-1 [OK] / displaying foreman-proxy [OK] / All services displayed [FAIL] Some services are not running (iop-core-host-inventory, iop-core-host-inventory-migrate, iop-service-advisor-backend-api, iop-service-remediations-api, iop-service-vmaas-webapp-go, iop-service-vuln-evaluator-recalc, iop-service-vuln-evaluator-upload, iop-service-vuln-listener, iop-service-vuln-taskomatic) -------------------------------------------------------------------------------- Scenario [Status Services] failed. The following steps ended up in failing state: [service-status] Resolve the failed steps and rerun the command. If the situation persists and, you are unclear what to do next, contact Red Hat Technical Support. In case the failures are false positives, use --whitelist="service-status" [root@satellite ~]# cat /etc/foreman-installer/scenarios.d/satellite-answers.yaml | grep iop iop: false
Found afew more, options to disable but still same issue observed.
# satellite-installer --full-help | grep iop --[no-]enable-iop Enable 'iop' puppet module (default: false) = Module iop: --iop-enable-advisor Enable advisor services (current: true) --reset-iop-enable-advisor Reset enable_advisor to the default value (true) --iop-enable-vulnerability Enable vulnerability services (current: true) --reset-iop-enable-vulnerability Reset enable_vulnerability to the default value (true) --iop-foreman-base-url Base URL for Foreman connection (current: UNDEF) --reset-iop-foreman-base-url Reset foreman_base_url to the default value (UNDEF) --iop-register-as-smartproxy Whether to register as a smart proxy (current: true) --reset-iop-register-as-smartproxy Reset register_as_smartproxy to the default value (true)
- depends on
-
SAT-38960 Correct IoP feature detection, installer answers can be false by evgeni · Pull Request #1055 · theforeman/foreman_maintain · GitHub
-
- Testing
-
-
SAT-38782 Add parameter to ensure all services absent by ehelms · Pull Request #72 · theforeman/puppet-iop · GitHub
-
- Closed
-
-
SAT-38827 Update IoP detection based on the iop::ensure Installer answer by evgeni · Pull Request #1050 · theforeman/foreman_maintain · GitHub
-
- Closed
-
-
SAT-38835 purge volumes and networks when ensuring absent by evgeni · Pull Request #74 · theforeman/puppet-iop · GitHub
-
- Closed
-
-
SAT-38848 cleanup kafka-init containers by evgeni · Pull Request #75 · theforeman/puppet-iop · GitHub
-
- Closed
-
-
SAT-38888 Properly handle idempotently removing image by ehelms · Pull Request #119 · southalc/podman · GitHub
-
- Closed
-
-
SAT-38889 Fix iop_frontend trying to pull image with ensure absent by ehelms · Pull Request #77 · theforeman/puppet-iop · GitHub
-
- Closed
-
-
SAT-38921 confine installer feature until installer run once by evgeni · Pull Request #1052 · theforeman/foreman_maintain · GitHub
-
- Closed
-
-
SAT-38922 Ensure cvemap downloader is removed if set to absent by ehelms · Pull Request #79 · theforeman/puppet-iop · GitHub
-
- Closed
-