Chapter 1. Summary of Changes

Custom Products enablement and Simple Content Access

• Custom Products are now disabled by default.
• The content access of your hosts and activation keys does not change. This is ensured by adding appropriate enabled or disabled overrides to repositories during the upgrade in organizations both with and without Simple Content Access.
• Due to this approach, you can smoothly transition your organizations to Simple Content Access.

Improved Content View management

• A Content View version displays an indicator icon in the Versions table if the Content View has new changes. The icon is grey if Satellite was not able to determine the state of changes, for example, when audit records have been removed.
• The Content View publishing wizard displays a message if your Content View contains no audited changes and you do not need to publish the Content View.
• A Content View version displays an indicator icon in the Versions table if the Content View has a filter applied.

Improved Lifecycle environment assignment

• You can assign a host to a Lifecycle environment on a particular Capsule only if the Capsule includes that Lifecycle environment for syncing from Satellite.
• If you attempt to assign hosts in bulk to a Lifecycle environment, which is not synced on a particular Capsule, the task will fail with an error message for the hosts that rely on this Capsule.
• If you want to reassign an individual host to another Lifecycle environment, you can only select Lifecycle environments that are synced to that host’s Capsule.

Ansible roles in the Satellite API

• You can add/remove a single Ansible role to/from hosts or host groups without having to define all Ansible roles for each change in Ansible roles assignment.

Recurrent remote execution jobs and sync plans

• You can use extended cron lines to specify, for example, a particular day in a week and month.

Improved report templates

• Host – Applicable Errata and Host – Registered Content Hosts – Using a new option, you can select whether the report should list all applicable errata or only the installable errata.
• Host – Applied Errata – The report now contains the Erratum release date.

Global host registration form

• Asterisks have been removed from optional fields in the registration form that were incorrectly marked as mandatory previously.

Apache defaults to system-wide crypto policies

• You can configure cryptographic policies on the system level on Satellite Server and Apache configuration inherits them by default. For more information, see Using system-wide cryptographic policies in Red Hat Enterprise Linux 8 Security hardening.

Improved documentation

• Better explanation of Resolving Package Dependencies in Managing Content.
• Documentation about OpenSCAP configuring and scanning is moved from Administering Red Hat Satellite to a new standalone guide Managing Security Compliance.

• Upgrading and Updating guide is now split into two separate guides:

  • Upgrading Red Hat Satellite to 6.14
  • Updating Red Hat Satellite

The following parameters have been removed in this release:

• --foreman-proxy-content-puppet: Removed to simplify the Puppet integration in Satellite.
• --puppet-auth-template: Removed along with Puppet 6 support.
• --puppet-server-use-legacy-auth-conf: Removed along with Puppet 6 support.

The following parameters have been added in this release:

• --foreman-proxy-content-pulpcore-hide-guarded-distributions: To hide distributions that are protected by a content guard from the default listing.
• --foreman-proxy-plugin-openscap-ansible-module: To ensure the Ansible module for the OpenSCAP plugin.
• --foreman-proxy-plugin-openscap-ansible-module-ensure: To ensure the Ansible module for the OpenSCAP plugin.

The following parameters have been replaced in this release:

• --puppet-puppetmaster has been replaced with --puppet-agent-server-hostname: To set the hostname of your Puppet server.
• --puppet-port has been replaced with --puppet-agent-server-port: To override the port of the server you connect to.