Plugins » Katello

Description of problem:
"Paid" content can't be imported on airgapped (disconnected) satellite

Version-Release number of selected component (if applicable):
-

How reproducible:
always

Steps to Reproduce:
1. Prepare an export of "paid" content (e.g. RHSCL repository) - (use valid manifest, sync the repo, set download policy to immediate, do the export)
hammer content-export complete library --organization-id <id>
2. Prepare airgapped(disconnected) machine (hammer settings set --name content_disconnected --value true)
3. Copy the exported content to airgapped(disconnected) machine (scp ...)
4a. Use "invalid" manifest (i.e. does not have rights to access RHSCL repository)
4b. Disable outgoing connection on port 443
firewall-cmd --direct --add-rule ipv4 filter OUTPUT 0 -p tcp -m tcp --dport=443 -j DROP
firewall-cmd --direct --add-rule ipv4 filter OUTPUT 1 -j ACCEPT
5. Try to import
hammer content-import library --organization-id <id> --path /var/lib/pulp/imports/<path>

Actual results:
Could not import the archive.:
a) Forbidden - server refused to process the request.
b) Request Timeout

Expected results:
The content should be imported in both cases, Satellite should not try to contact RH CDN, when it's in "Disconnected mode"