Uploaded image for project: 'Satellite'
  1. Satellite
  2. SAT-38347

After enabling iop on Satellite, it cannot be disabled.

XMLWordPrintable

    • 8
    • False
    • rubygem-foreman_maintain-1.13.6, foreman-installer-3.17.0-0.1.develop.20250930130416git55c6d3d
    • Satellite Rocket Sprint 6, Satellite Rocket Sprint 7
    • sat-rocket
    • None
    • None
    • Rejected
    • None

      On Satellite 6.18, disabling the IOP does not remove IOP-related services; they still appear on the satellite server.

      Steps to Reproduce:

      1. Configure Satellite 6.18 and enable IOP.
      1. Attempt to disable IOP.
      1. Observe that IOP-related services still appear.

       

      [root@satellite ~]# satellite-installer --no-enable-iop
      2025-09-12 18:41:28 [NOTICE] [root] Loading installer configuration. This will take some time.
      2025-09-12 18:41:31 [NOTICE] [root] Running installer with log-based terminal output at level NOTICE.
      2025-09-12 18:41:31 [NOTICE] [root] Use -l to set the terminal output log level to ERROR, WARN, NOTICE, INFO, or DEBUG. See --full-help for definitions.
      2025-09-12 18:41:32 [NOTICE] [checks] System checks passed
      Package versions are locked. Continuing with unlock.
      2025-09-12 18:41:37 [NOTICE] [configure] Starting system configuration.
      2025-09-12 18:41:46 [NOTICE] [configure] 250 configuration steps out of 1544 steps complete.
      2025-09-12 18:41:46 [NOTICE] [configure] 500 configuration steps out of 1547 steps complete.
      2025-09-12 18:41:51 [NOTICE] [configure] 750 configuration steps out of 1549 steps complete.
      2025-09-12 18:41:51 [NOTICE] [configure] 1000 configuration steps out of 1555 steps complete.
      2025-09-12 18:41:51 [NOTICE] [configure] 1250 configuration steps out of 1555 steps complete.
      2025-09-12 18:42:38 [NOTICE] [configure] 1500 configuration steps out of 1555 steps complete.
      2025-09-12 18:42:41 [NOTICE] [configure] System configuration has finished.
        Success!
        * Satellite is running at https://satellite.example.com
        * To install an additional Capsule on separate machine continue by running:
            capsule-certs-generate --foreman-proxy-fqdn "$CAPSULE" --certs-tar "/root/$CAPSULE-certs.tar"
        * Capsule is running at https://satellite.example.com:9090
      The full log is at /var/log/foreman-installer/satellite.log
      Package versions are being locked.
      [root@satellite ~]# satellite-maintain service status -b
      Running Status Services
      ================================================================================
      Get status of applicable services: 
      Displaying the following service(s):
      redis, postgresql, iop-core-engine, iop-core-gateway, iop-core-host-inventory, iop-core-host-inventory-api, iop-core-host-inventory-migrate, iop-core-ingress, iop-core-kafka, iop-core-puptoo, iop-core-yuptoo, iop-service-advisor-backend-api, iop-service-advisor-backend-service, iop-service-remediations-api, iop-service-vmaas-reposcan, iop-service-vmaas-webapp-go, iop-service-vuln-evaluator-recalc, iop-service-vuln-evaluator-upload, iop-service-vuln-grouper, iop-service-vuln-listener, iop-service-vuln-taskomatic, pulpcore-api, pulpcore-content, pulpcore-worker@1.service, pulpcore-worker@2.service, pulpcore-worker@3.service, pulpcore-worker@4.service, tomcat, dynflow-sidekiq@orchestrator, foreman, httpd, dynflow-sidekiq@worker-1, dynflow-sidekiq@worker-hosts-queue-1, foreman-proxy
      - displaying redis                                 [OK]                         
      \ displaying postgresql                            [OK]                         
      | displaying iop-core-engine                       [OK]                         
      | displaying iop-core-gateway                      [OK]                         
      | displaying iop-core-host-inventory               [FAIL]                       
      | displaying iop-core-host-inventory-api           [OK]                         
      | displaying iop-core-host-inventory-migrate       [FAIL]                       
      | displaying iop-core-ingress                      [OK]                         
      | displaying iop-core-kafka                        [OK]                         
      | displaying iop-core-puptoo                       [OK]                         
      | displaying iop-core-yuptoo                       [OK]                         
      | displaying iop-service-advisor-backend-api       [FAIL]                       
      | displaying iop-service-advisor-backend-service   [OK]                         
      | displaying iop-service-remediations-api          [FAIL]                       
      | displaying iop-service-vmaas-reposcan            [OK]                         
      | displaying iop-service-vmaas-webapp-go           [FAIL]                       
      | displaying iop-service-vuln-evaluator-recalc     [FAIL]                       
      | displaying iop-service-vuln-evaluator-upload     [FAIL]                       
      | displaying iop-service-vuln-grouper              [OK]                         
      | displaying iop-service-vuln-listener             [FAIL]                       
      | displaying iop-service-vuln-taskomatic           [FAIL]                       
      | displaying pulpcore-api                          [OK]                         
      | displaying pulpcore-content                      [OK]                         
      | displaying pulpcore-worker@1.service             [OK]                         
      | displaying pulpcore-worker@2.service             [OK]                         
      | displaying pulpcore-worker@3.service             [OK]                         
      | displaying pulpcore-worker@4.service             [OK]                         
      | displaying tomcat                                [OK]                         
      | displaying dynflow-sidekiq@orchestrator          [OK]                         
      | displaying foreman                               [OK]                         
      | displaying httpd                                 [OK]                         
      | displaying dynflow-sidekiq@worker-1              [OK]                         
      | displaying dynflow-sidekiq@worker-hosts-queue-1  [OK]                         
      / displaying foreman-proxy                         [OK]                         
      / All services displayed                                              [FAIL]    
      Some services are not running (iop-core-host-inventory, iop-core-host-inventory-migrate, iop-service-advisor-backend-api, iop-service-remediations-api, iop-service-vmaas-webapp-go, iop-service-vuln-evaluator-recalc, iop-service-vuln-evaluator-upload, iop-service-vuln-listener, iop-service-vuln-taskomatic)
      --------------------------------------------------------------------------------
      Scenario [Status Services] failed.
      The following steps ended up in failing state:
        [service-status]
      Resolve the failed steps and rerun the command.
      If the situation persists and, you are unclear what to do next,
      contact Red Hat Technical Support.
      In case the failures are false positives, use
      --whitelist="service-status"
      
      [root@satellite ~]# cat /etc/foreman-installer/scenarios.d/satellite-answers.yaml | grep iop
      iop: false
      

      Found afew more, options to disable but still same issue observed.

      1. # satellite-installer --full-help | grep iop
            --[no-]enable-iop                                                            Enable 'iop' puppet module (default: false)
        = Module iop:
            --iop-enable-advisor                                                         Enable advisor services (current: true)
            --reset-iop-enable-advisor                                                   Reset enable_advisor to the default value (true)
            --iop-enable-vulnerability                                                   Enable vulnerability services (current: true)
            --reset-iop-enable-vulnerability                                             Reset enable_vulnerability to the default value (true)
            --iop-foreman-base-url                                                       Base URL for Foreman connection (current: UNDEF)
            --reset-iop-foreman-base-url                                                 Reset foreman_base_url to the default value (UNDEF)
            --iop-register-as-smartproxy                                                 Whether to register as a smart proxy (current: true)
            --reset-iop-register-as-smartproxy                                           Reset register_as_smartproxy to the default value (true)

              egolov@redhat.com Evgeni Golov
              rhn-support-sabhasin Sahil Bhasin
              Tasos Papaioannou Tasos Papaioannou
              Votes:
              1 Vote for this issue
              Watchers:
              10 Start watching this issue

                Created:
                Updated:
                Resolved: