Chapter 2. New features

Discovery image updated with RHEL 9.6.0

With this update, the Discovery image is based on Red Hat Enterprise Linux 9.6.0.

Ansible check mode in Ansible job templates

With this update, you can enable Ansible check mode per job, instead of per host, in Ansible job templates. This streamlines workflows, improves flexibility, and reduces manual configuration, allowing validation of changes before application.

Satellite validates snippets in provisioning templates

With this update, a validation check validates all provisioning templates, including all snippets during host build submission. As a result, Satellite validates templates before submission, preventing errors during provisioning.

Satellite server accepts additional key algorithms for ISC DHCP

Satellite uses the Object Management Application Programming Interface (OMAPI) protocol when connecting to ISC DHCP. With this update, you can configure the hash-based message authentication code (HMAC) algorithm used in the connection. As a result, you can use more secure algorithms than before this update, including algorithms that are compatible with the Federal Information Processing Standards (FIPS) if your Satellite server connects to ISC DHCP.

http_proxy encrypts URL credentials

With this update, URL-embedded credentials, for example, https://user:password@proxy.example.com, are automatically encrypted in the http_proxy setting. By preventing the exposure of sensitive authentication information in plain text, this update enhances security and prevents credential exposure while maintaining functionality.

Support for remote execution of package and errata installation on image mode hosts

With this update, you can run existing package and errata installation remote execution jobs on image mode hosts by using the dnf install --transient command instead of running the bootc usr-overlay command manually. In earlier versions, these operations failed because image mode systems restricted write access to certain directories by default.

Red Hat Lightspeed advisor in Satellite is fully supported

Red Hat Lightspeed advisor in Satellite, introduced in Satellite 6.17 as a Technology Preview, is fully supported with this release.

Insights rebranded as Red Hat Lightspeed in the Satellite UI

In the Satellite UI, Red Hat Insights is rebranded to Red Hat Lightspeed in menus, tabs, and action links. This update ensures the UI reflects the current service name.

Minimal data collection for Red Hat Lightspeed

With this update, you can configure Satellite to use minimal data collection when you upload host data to Red Hat Lightspeed.

Obfuscating host names and IP addresses during Red Hat Lightspeed data upload

You can configure Red Hat Satellite to obfuscate host names and IP addresses to prevent sensitive information from being exposed when you upload host data to Red Hat Lightspeed.

Enhanced Red Hat subscription usage tracking and reporting

With this update, you can manage Red Hat subscription manifests more effectively in Satellite. Each organization requires its own subscription allocation, which enables multiple organizations to maintain separate subscriptions. Satellite also supports future-dated subscriptions in a manifest, ensuring uninterrupted access to repositories.

Patternfly designs in the Satellite web UI are modernized

Satellite upgraded its Patternfly 4 designs to Patternfly 5. Additionally, some Patternfly 3 designs are upgraded to Patternfly 5.

Job details page is redesigned

The Job details page is enhanced for improved usability and performance. The web UI displays the new design by default. You can switch to the previous design by clicking Legacy UI on the Job details page.

New Hosts overview page is fully supported

The new Hosts overview page, introduced in Satellite 6.16 as a Technology Preview, is fully supported with this release. The new Hosts overview UI is the default. You can still disable it in Settings or switch to the legacy UI from the local menu.

Dual-stack networks partially supported

With this update, Satellite deployment and operation in dual-stack (IPv4 and IPv6) networks is partially supported. You can register hosts, manage content, and patch your hosts in dual-stack networks. Other features are not yet tested and are not supported with this release.

Satellite web UI links to Red Hat Satellite Upgrade Helper

The new Administer > Satellite Upgrade item in the vertical navigation contains a link to the Red Hat Satellite Upgrade Helper application. You can use Red Hat Satellite Upgrade Helper to obtain upgrade instructions customized for your current version number of Red Hat Satellite. As a result, you receive instructions that are specific to your upgrade path, as well as steps to prevent known issues. For more information, see Red Hat Satellite Upgrade Helper on the Red Hat Customer Portal.

Mosquitto follows the system-wide cryptographic policy

Mosquitto, the service used by the remote execution (REX) pull mode, follows the system-wide cryptographic policy. As a result, you can configure the supported Transport Layer Security (TLS) protocols and ciphers in the system-wide policy and Mosquitto uses them.

Default mirroring policy settings for repositories

With this update, you can set the default mirroring policy for custom repositories in Settings:

Increased efficiency in publication tasks of Yum repositories

This release improves the pulp-rpm plugin to increase the performance of publication tasks of Yum repositories. As a result, you might see a modest speed increase in publication tasks, such as repository synchronization, publication, and promotion.

Rolling content views

With this update, you can create rolling content views in Satellite to provide hosts with a continuous stream of the latest synchronized content from a defined subset of repositories.

Support for consuming Capsule container content from a load-balanced Capsule

With this update, you can consume container content from Capsules that are behind a load balancer. Before this update, this capability was not supported, which created a gap in load-balanced container workflows.

Support for managing Flatpak remotes in Satellite

You can manage Flatpak remotes directly in Satellite. You can create Flatpak remotes to access and manage repositories, scan them to fetch metadata and discover available content, mirror repositories into existing products for synchronization and content management, and view remote details, including the list of provided repositories.

Configure Capsule to distribute Flatpak repositories

With this update, you can configure Capsule Servers to synchronize and distribute Flatpak repositories to managed hosts by using certificate authentication. You can add Capsule as a container registry or a Flatpak remote to a host, authenticate with the registry by using certificates, and install applications such as Mozilla Firefox directly from the synchronized repositories. Lifecycle management of Flatpak and container content is supported only when using certificate authentication.

satellite-usage-metrics-condense.timer to collect usage metrics

This release adds a systemd timer named satellite-usage-metrics-condense.timer that collects condensed usage metrics from Satellite deployments. The resulting report is stored in the /etc/rhsm/facts/foreman.facts file and uploaded as custom Red Hat Subscription Manager facts. You can use the satellite-maintain report condense command to review the list of condensed usage metrics.

Modules from Satellite Ansible Collection support Kerberos authentication

When using Ansible modules from the Satellite Ansible Collection, you can use a Kerberos ticket to connect to the Satellite API. Using a Kerberos ticket is supported for deployments where the Satellite Server is configured to use Identity Management as an external authentication source.

Provisioning hosts improved

The Provisioning hosts guide is reorganized. Major changes include the following:

Improved upgrading and updating documentation

The Upgrading connected Red Hat Satellite to 6.18, Upgrading disconnected Red Hat Satellite to 6.18, and Updating Red Hat Satellite guides are updated. Major changes include removing out-of-date steps and eliminating duplication. These improvements help make the guides shorter and easier to follow during upgrading and updating.

Improved Integrating provisioning infrastructure services

The Integrating provisioning infrastructure services guide is updated. Major changes include optimizing the procedures to make the instructions clearer and up-to-date. These improvements help make the guide better organized and easier to follow.

Improved documentation on using Satellite Ansible Collection

Documentation on using modules from the Satellite Ansible Collection is updated and expanded. Satellite Ansible Collection is a set of Ansible modules that interact with the Satellite API. You can use the modules to automate many aspects of Satellite administration. See the new Using the Satellite Ansible Collection guide.