Satellite 6.1.x - Bugs/issues

Latest response

I have been working through several bugs/issues with Satellite 6.1.x and I was hoping other people could list issues they have found to confirm it's not just the installation (have confirmed these in multiple installations).

Host Groups
My primary issue is when cloning host groups, the basic bugs are.
1. If you clone a host group, any config groups included in that host group are not cloned
2. If you clone a host group, any overrides for parameters set are not maintained (so host group level overrides need to be re-created after clone)

Strangely, if you have assigned classes directly to the host group (not through config groups) these appear to clone OK.

Another issue I have found is that if you specify a parameter override in the global scope of a Host Group, when you clone that Host Group it will generate the following error (when clicking submit):

Host Group Not Found

Please try to update your request

When removing the parameter the Host Group will clone again ok.

Access Insights
If you disable Access Insights under the following menu

Access Insights -> Manage

All pages under the 'Access Insights' menu return '403 - Permission Denied' errors, rather than a meaningul message such as "Access Insights is currently disabled'

Has anyone seen these same issues? Is there anything else I should be looking out for? Is the Satellite 6.2 beta going to be open?

Responses

The parameters issue is being tracked at https://bugzilla.redhat.com/show_bug.cgi?id=1253655. It is already fixed, and will be included in the 6.2 release. I am asking folks to look at the other issues as well.

Bryan,

Can you also advise why Red Hat have made the decision to enable Access Insights by default? It is a pretty major assumption to make that customers want to send sensitive network/host information out of their network by default. Surely this option should be 'opt in'?

My understanding is that it is disabled by default. Machines should not be sending data. Your subscription should allow you 10 machines to try it out, but you would need to enabkle it. You need to follow the steps at

https://access.redhat.com/insights/getting-started/direct/

In order to enable it per machine.

Some more issues:

Content Views:

A composite content view can't contain contents views that are created off the same repository. This appears to be an arbitrary constraint with no real technical reasoning. This greatly limits the flexibility of Content Views in general. eg. I may have a Content View for each quarter of patching (from the same repository), and want a Composite Content View which contains all quarters to date.

When viewing Content View summary pages that list that Content View versions, there is no indication in the UI that the Content View has a filter applied to the content or not.

Lifecycle Environments:

When viewing a Lifecycle Environment you can't determine the version of the promoted Content View. The only information provided about the Content View is the 'Last Published', which isn't indicative of the version.

virt-who:

Currently doesn't resolve the UID's of VMware ESX hosts retrieved through executing virt-who to hostnames. I know this is a known bug but it really needs to be resolved. In environments with 100+ ESX hosts, renaming hosts in Satellite 6 by hand is extremely tedious.

Satellite ISO Download:

The current available version via ISO download from the customer poral is 6.1.1. The current release when installing from packages is 6.1.5, so the ISO version is 4 revisions behind.

regarding this

Currently doesn't resolve the UID's of VMware ESX hosts retrieved 
through executing virt-who to hostnames. I know this is a known bug 
but it really needs to be resolved. In environments with 100+ ESX hosts, 
renaming hosts in Satellite 6 by hand is extremely tedious.

newer virt-who does in fact do this. You'll find newer virt-who in the Satellite Tools repo. Add the following to your virt-who config.

hypervisor_id=hostname

Regarding Red Hat (formerly Access) Insights, whilst the server-side is enabled, the clients are NOT by default. They are explicitly enabled when one includes the access_insights puppet class on a host group. You need both before data is sent to the portal.

Richard,

Thanks for the answers.

For me, both of these points relate to sensible/practical defaults.

Is the hostname used by default for ESX hosts with the virt-who included in Satellite 6.2? I can't think of a scenario where someone would want to populate their Satellite with ESX UIDs. (ie. will this be the default virt-who configuration out of the box?).

With regards to Red Hat Insights, why is it enabled at all by default? What information does it send back to Red Hat about the Satellite server itself (above and beyond the 'facts' from facter that are reported back?). I still feel that something of this nature should be 'opt in', regardless of what it sends in the enabled state (as what it sends may change over time, and having it enabled raises security concerns).

I also noticed that in a default install, the puppet module list reports that puppetlabs/stdlib module is missing and is listed as a dependency for the insights module. Is this a known issue?

On Content Views:

Not really arbitrary. Rather, it is because each repo can only be consumed one time so have different versions of the same repo seemed odd.

On LIfecycle Environments:

I though we had an RFE for this, I will ask and add it if not there

On ISO Download:

We are testing the 6.1.5 version right now.

Brian, thanks for the response.

Content Views:

I don't think it's odd, for me it's about flexibility. I have had multiple examples where I want to build a composite content view using different selections of content from the same repository. Rather than combine separate 'selection' content views into a composite content view, I have to make new content views for each combination. The content view creates an abstraction layer so repos aren't directly connected to hosts/Lifecycle Environments, why does it matter what repository that content view's content is coming from?

LIfecycle Environments:

Thanks, I couldn't find an RFE/Bug for this.

ISO Download:

Testing 6.1.5 version of the ISO? or 6.1.5 generally? we built yesterday and received 6.1.5 from the repo. Were the other minor versions released or did it jump from 6.1.1 to 6.1.5?

Thanks again.

It appears i'm not the only one that sees the Content View issue as a constraint. Richard linked to the following document in another thread: https://access.redhat.com/sites/default/files/pages/attachments/2015-10_Steps_to_Build_a_Standard_Operating_Environment.pdf Which has the note from the author (page 118):

You may also need to split the repositories because Satellite 6 currently does not let you use
the same repositories in multiple content views for a system. In our solution guide setup, our 
RHEL core build contains software packages for various virtualization platforms and the 
Zabbix monitoring agents.

Does the fact that it states "currently does not let you" suggest that this is likely to change in future?

-edit-

Page 66 also states the following workaround (including/synchronizing repositories multiple times with different products) which seems less than ideal:

Because you cannot use the same repository inside multiple content views that are stacked 
together as a composite content view, some scenarios may force you to create 
two Products with the same repository (not shared but actually configured and synchronized twice).

Some additional issues I have come across:

Content Views:

When viewing any version of a content view other than the latest, you are unable to see the filters that were applied to create that version of content view. This causes problems when you have multiple administrators working on the same content views. I would have expected the filters used to create the content view version would be stored when the version is created so they can be reviewed after creation (ie. historical information about previous version). Without this visibility of filters you are left to use the description text box to summarise (often complex) filtering configurations.

Content Hosts UI:

When browsing content hosts under Hosts -> Content Hosts, the UI only displays 20 items at a time and pagination is extremely slow due to the UI fade in/out effect. Changing 'entries_per_page' to increase/modify the amount of hosts displayed causes the UI to slow dramatically. On a dev server I have 107 content hosts registered and to display all 107 on the 'Content Hosts' page takes 29 seconds to render (4 Core, 16G RAM, SSD, 10G NIC).

(minor) When filtering content hosts in the search box, the search doesn't default to substring search.. a glob/wildcard must be supplied or the search will be on exact match (and return 0 rows), is there a possibility that an RFE can be raised to change this behaviour?

In the Content Hosts view, the dates listed under 'Registered' and 'Last Checkin' are in American m/d/y format, even though the Satellite server was configured for local d/m/y at installation time.

Puppet Environments:

'Configure -> Environments -> New Puppet Environment' doesn't create the Puppet Environment directory on disk in /etc/puppet/environments

I agree with the issue around keeping a history of content filters. One workaround for date-based errata filters I have been using is to add them, rather than replace them but that does rely on systems administrators all doing the right thing. This wouldn't work when filtering things out in later versions that were included in earlier versions.

Search seems to inconsistent in Satellite and I'm not sure if content host filtering is the only case in which you need wildcards. I'd be happier with one or the other -- filtering as you type or having to use wildcards -- because it makes it easier when training others and writing doco!

We have the same issue with dates and would also like this fixed.

I can confirm that upping the entries_per_page setting does up the time to render significantly. I changed mine to 50 and, while it did not slow down as dramatically as it did for you (presumably you set it to ~100), it slowed down the extent that it would have been much quicker for me to use entries_per_page=20 and use the scroll bar to scroll down for the additional hosts.

What we need most of all in 6.2, though, is the ability to run arbitrary commands on content hosts, particularly the ability to reboot. We are fairly happy with the rest of 6.1.x but we only use it for patching so far.

You might be in luck for your remote execution requirement. I found this slide deck in a random search. Slide 49 covers remote execution in 6.2. https://access.redhat.com/articles/2155451

It's the closest thing I have seen to a roadmap thus far.

Doug,

Regarding "...the ability to run arbitrary commands on content hosts", this is will be available in Red Hat Satellite 6.2 and known as "remote execution". It is available now in the Red Hat Satellite 6.2 Beta. For details of how to use it and examples, refer to https://access.redhat.com/documentation/en/red-hat-satellite/version-6.2-beta/host-configuration-guide/#chap-Host_Configuration_Guide-Running_Remote_Jobs_on_Satellite_Hosts.

PixelDrift.NET Support,

Regarding the issues noted on 14 January 2016, I think these would best be dealt with via bug tickets. Are you OK with that, or would you prefer they continue here? At a minimum, I would suggest raising the search RFE as an actual RFE, rather than leaving it here.

Discussion threads are great for just that, but to drive changes to the product, I think a bug report is best.

I have raised issues with the bug process in the past. The frequency that bug tickets end up marked 'private' or linked as duplicates to existing private tickets results in limited visibility of the bug progress/resolution. At least on the discussion forum the issues and associated responses from Red Hat team members are freely visibile and easily located (through portal search) by other users. Whether Red Hat members choose to take the feedback and implement any changes is really up to them.

I discussed this with Russell today. Better visibility on bug and RFE ticket progress and resolution is something we're going to look into. I definitely understand the frustration of trying to track progress on an issue that is being worked on in a non-public BZ.

Thanks for this David, I appreciate you following it up.

Thanks again for your feedback. What happens with feedback, whether it comes from inside or outside Red Hat, should be transparent. There are times BZ tickets contain sensitive customer information, in which case their content must be kept private.

We are working to improve the handling of feedback, both on the product and documentation.

Russell,

I accept that some tickets need to be private due to customer information, but I think it's interesting how many BZ tickets now end up pointing to private tickets.

Other vendors I use strip customer specific information so tickets can be viewed publicly (I accept this introduces risks of leaking customer info).

Russell, some early feedback on 6.2 Beta 2 documentation:

https://access.redhat.com/products/red-hat-satellite/#getstarted

Step 3: says 'Respositories' should be 'Repositories'. Also the second subscription-manager command is missing the hyphen.

Step 5: suggests running the following command

foreman-installer --scenario katello

which results in:

ERROR: Selected scenario is DISABLED, can not continue. Use --list-scenarios to list available options. You can also --enable-scenario SCENARIO to make the selected scenario available.

Then when you list scenarios as suggested, you can't see the disabled 'katello' scenario (Also notice how Satellite has one 'l' in the description).

foreman-installer --list-scenarios
Available scenarios
  Capsule (use: --scenario capsule)
        Install a stand-alone Capsule.
  Satellite (use: --scenario satellite)
        Install Satelite server

It's only after passing the following command that Step 5 actually works:

foreman-installer --enable-scenario katello
foreman-installer --scenario katello

PixelDrift.NET Support,

Thanks for that feedback on the "Get Started" instructions. I'll ensure those are addressed as soon as possible.

PixelDrift.NET Support,

Thanks to your help the "Get Started...." steps have been corrected.

Russell,

Step 3, is still called 'Respositories'

In Step 5 it's nice that they have changed the command to 'satellite-installer' but the associated text refers to a 'katello installer' which should really be cleaned up because an end user of Satellite should need to know (or be expected to know) what Katello is.

Text is here:

There are a lot of different available configuration options with the katello installer command......

Looking good now!

PixelDrift.NET Support,

Thank you.

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.