"Broken" Organization? Failed SCA Migration

Problem:

I tried to add all Users to the organization but got an entitlement error.

I get the same error if I change other things about the organization.

My first Idea was that something about our organization hasn’t been migrated to SCA correctly and the state is “broken” since several Versions.

Expected outcome:

I am able to change settings inside our organization

Foreman and Proxy versions:

Foreman version: 3.15.1

Foreman and Proxy plugin versions:

Plugins:

  • foreman-tasks 11.0.0
  • foreman_ansible 16.0.0
  • foreman_dhcp_browser 0.1.2
  • foreman_discovery 26.0.0
  • foreman_dlm 4.0.0
  • foreman_expire_hosts 9.0.1
  • foreman_leapp 2.0.4
  • foreman_monitoring 3.4.0
  • foreman_puppet 9.0.0
  • foreman_remote_execution 16.0.3
  • foreman_rescue 5.0.0
  • foreman_scc_manager 5.0.4
  • foreman_snapshot_management 4.0.0
  • foreman_statistics 2.1.0
  • foreman_supervisory_authority 0.2.0
  • foreman_templates 10.0.8
  • foreman_vault 3.0.0
  • foreman_virt_who_configure 0.5.26
  • foreman_webhooks 4.0.1
  • foreman_wreckingball 6.0.0
  • katello 4.17.2
  • puppetdb_foreman 6.0.2

Distribution and version:

RHEL 9.7

Other relevant data:

2025-12-01T14:30:45 [I|app|dd45d82a] Started PATCH "/organizations/3-MyOrg" for 172.26.164.115 at 2025-12-01 14:30:45 +0100
2025-12-01T14:30:45 [I|app|dd45d82a] Processing by OrganizationsController#update as HTML
2025-12-01T14:30:45 [I|app|dd45d82a]   Parameters: {"authenticity_token"=>"XXXXXX", "organization"=>{"name"=>"MyOrg", "service_level"=>"", "description"=>"", "ignore_types"=>["0", "0", "0", "0", "0", "0", "0", "0", "0", "0"], "user_ids"=>["1", "507", "658", "346", "189", "376", "138", "165", "", "434", "655", "653", "353", "318", "719", "324", "648", "696", "549", "722", "601", "661", "636", "524", "339", "685", "718", "423", "721", "676", "710", "631", "498", "482", "651", "240", "670", "664", "619", "543", "707", "462", "690", "539", "354", "683", "512", "698", "709", "639", "652", "327", "132", "515", "702", "281", "677", "525", "711", "695", "708", "674", "675", "595", "180", "474", "417", "156", "606", "706", "633", "495", "668", "689", "662", "684", "310"], "smart_proxy_ids"=>["21", "144", "136", "10", "142", "143", "73", "74", "141", "83", "138", "84", "139", "135", "137", "", "134", "67"], "subnet_ids"=>["208", "205", "250", "248", "186", "206", "201", "249", "251", "211", "", "244", "245", "196"], "compute_resource_ids"=>["4", "44", "37", "24", "43", "42", "39", "33", "41", "46", ""], "medium_ids"=>["51", "89", "49", "", "92", "85", "86", "90", "38", "52", "39", "41", "87", "40", "48", "42", "43", "37", "88", "91", "44"], "provisioning_template_ids"=>["883", "1112", "", "52", "54", "53", "150", "38", "20", "1056", "1050", "19", "1111", "170", "405", "953", "34", "794", "839", "793", "138", "650", "817", "135", "651", "333", "276", "273", "1059", "57", "55", "56", "945", "14", "16", "18", "17", "43", "44", "625", "621", "623", "622", "63", "5", "4", "291", "294", "1", "58", "797", "3", "823", "39", "782", "783", "64", "70", "162", "321", "587", "946", "153", "37", "282", "288", "285", "1096", "164", "167", "21", "770", "51", "15", "438", "827", "584", "1069", "6", "408", "1057", "2", "1058", "7", "40", "1060", "41", "784", "785", "197", "59", "468", "42", "934", "935", "936", "1061", "937", "1070", "942", "938", "249", "243", "246", "612", "613", "614", "786", "252", "834", "1107", "173", "141", "231", "234", "411", "804", "1089", "1123", "870", "835", "981", "836", "1105", "1106", "802", "803", "832", "939", "605", "414", "417", "420", "423", "940", "1090", "144", "1063", "943", "982", "1091", "1064", "1065", "1066", "1067", "176", "65", "255", "387", "297", "306", "312", "1097", "833", "303", "309", "300", "258", "441", "769", "787", "1062", "179", "261", "944", "624", "1068", "1108", "941"], "ptable_ids"=>["886", "99", "881", "497", "1098", "129", "228", "968", "1051", "495", "980", "966", "958", "973", "1047", "1046", "1095", "965", "970", "1006", "739", "888", "499", "1012", "105", "", "147", "807", "805", "947", "1093", "788", "983", "1001", "1002", "1003", "1004", "1005", "999", "850", "856", "861", "806", "1071", "1092", "789", "848", "989", "652", "381", "117", "132", "713", "402", "831", "602", "876", "741", "816", "737", "933", "931", "327", "726", "338", "734", "324", "279", "740", "742", "363", "357", "351", "102", "962", "822", "867", "866", "961", "820", "821", "96", "267", "830", "318", "378", "336", "849", "976", "979", "977", "978", "879", "1010", "1054", "1048", "1045", "1124", "885", "1125", "949", "948", "264", "875"], "domain_ids"=>["1", "2", "3", "61", "6", "64", "4", "30", "47", "62", "33", "45", "44", "7", "36", "63", "72", "75", "40", "49", "73", "48", "74", "", "10"], "realm_ids"=>[""], "hostgroup_ids"=>["40", "452", "448", "152", "439", "256", "449", "514", "521", "451", "524", "450", "481", "454", "453", "226", "153", "447", "243", "445", "523", "", "1", "259", "257", "526", "149", "218", "463", "474"], "location_ids"=>["6", "55", "19", "15", "18", "4", "5", "21", "", "20"], "organization_parameters_attributes"=>{"1764595842518"=>{"name"=>"", "parameter_type"=>"string", "value"=>"[FILTERED]", "hidden_value"=>"[FILTERED]", "_destroy"=>"false"}, "1764595820675"=>{"name"=>"tes", "parameter_type"=>"string", "value"=>"[FILTERED]", "hidden_value"=>"[FILTERED]", "_destroy"=>"false"}}}, "commit"=>"Submit", "id"=>"3-MyOrg"}
2025-12-01T14:30:45 [W|app|dd45d82a] Katello::Resources::Candlepin::Owner: 400 Bad Request {"displayMessage":"Content access mode is not present in the content access mode list for this org: entitlement","requestUuid":"Random_UUID"} (PUT /candlepin/owners/MyOrg)
2025-12-01T14:30:45 [I|app|dd45d82a] Backtrace for 'Katello::Resources::Candlepin::Owner: 400 Bad Request {"displayMessage":"Content access mode is not present in the content access mode list for this org: entitlement","requestUuid":"Random_UUID"} (PUT /candlepin/owners/MyOrg)' error (RestClient::BadRequest): Katello::Resources::Candlepin::Owner: 400 Bad Request {"displayMessage":"Content access mode is not present in the content access mode list for this org: entitlement","requestUuid":"Random_UUID"} (PUT /candlepin/owners/MyOrg)
 dd45d82a | /usr/share/gems/gems/rest-client-2.1.0/lib/restclient/abstract_response.rb:249:in `exception_with_response'
 dd45d82a | /usr/share/gems/gems/rest-client-2.1.0/lib/restclient/abstract_response.rb:129:in `return!'
 dd45d82a | /usr/share/gems/gems/rest-client-2.1.0/lib/restclient/request.rb:836:in `process_result'
 dd45d82a | /usr/share/gems/gems/rest-client-2.1.0/lib/restclient/request.rb:743:in `block in transmit'
 dd45d82a | /usr/share/ruby/net/http.rb:960:in `start'
 dd45d82a | /usr/share/gems/gems/rest-client-2.1.0/lib/restclient/request.rb:727:in `transmit'
 dd45d82a | /usr/share/gems/gems/rest-client-2.1.0/lib/restclient/request.rb:163:in `execute'
 dd45d82a | /usr/share/gems/gems/rest-client-2.1.0/lib/restclient/request.rb:63:in `execute'
 dd45d82a | /usr/share/gems/gems/rest-client-2.1.0/lib/restclient/resource.rb:79:in `put'
 dd45d82a | /usr/share/gems/gems/katello-4.17.2/app/lib/katello/http_resource.rb:98:in `issue_request'
 dd45d82a | /usr/share/gems/gems/katello-4.17.2/app/lib/katello/http_resource.rb:49:in `block (2 levels) in singleton class'
 dd45d82a | /usr/share/gems/gems/katello-4.17.2/app/lib/katello/resources/candlepin/owner.rb:46:in `update'
 dd45d82a | /usr/share/gems/gems/katello-4.17.2/app/models/katello/glue/candlepin/owner.rb:41:in `service_level='
 dd45d82a | /usr/share/gems/gems/activemodel-7.0.8.7/lib/active_model/attribute_assignment.rb:49:in `public_send'
 dd45d82a | /usr/share/gems/gems/activemodel-7.0.8.7/lib/active_model/attribute_assignment.rb:49:in `_assign_attribute'
 dd45d82a | /usr/share/gems/gems/activerecord-7.0.8.7/lib/active_record/attribute_assignment.rb:21:in `block in _assign_attributes'
 dd45d82a | /usr/share/gems/gems/activerecord-7.0.8.7/lib/active_record/attribute_assignment.rb:13:in `each'
 dd45d82a | /usr/share/gems/gems/activerecord-7.0.8.7/lib/active_record/attribute_assignment.rb:13:in `_assign_attributes'
 dd45d82a | /usr/share/gems/gems/activemodel-7.0.8.7/lib/active_model/attribute_assignment.rb:34:in `assign_attributes'
 dd45d82a | /usr/share/gems/gems/foreman-tasks-11.0.0/app/models/foreman_tasks/concerns/action_triggering.rb:41:in `update'
 dd45d82a | /usr/share/foreman/app/controllers/concerns/foreman/controller/taxonomies_controller.rb:79:in `block in update'
 dd45d82a | /usr/share/foreman/app/models/taxonomy.rb:74:in `block in no_taxonomy_scope'
 dd45d82a | /usr/share/foreman/app/models/taxonomy.rb:81:in `block (2 levels) in as_taxonomy'
 dd45d82a | /usr/share/foreman/app/models/concerns/foreman/thread_session.rb:195:in `as_location'
 dd45d82a | /usr/share/foreman/app/models/taxonomy.rb:80:in `block in as_taxonomy'
 dd45d82a | /usr/share/foreman/app/models/concerns/foreman/thread_session.rb:154:in `as_org'
 dd45d82a | /usr/share/foreman/app/models/taxonomy.rb:79:in `as_taxonomy'
 dd45d82a | /usr/share/foreman/app/models/taxonomy.rb:73:in `no_taxonomy_scope'
 dd45d82a | /usr/share/foreman/app/controllers/concerns/foreman/controller/taxonomies_controller.rb:78:in `update'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_controller/metal/basic_implicit_render.rb:6:in `send_action'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/abstract_controller/base.rb:215:in `process_action'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_controller/metal/rendering.rb:165:in `process_action'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/abstract_controller/callbacks.rb:234:in `block in process_action'
 dd45d82a | /usr/share/gems/gems/activesupport-7.0.8.7/lib/active_support/callbacks.rb:118:in `block in run_callbacks'
 dd45d82a | /usr/share/foreman/app/controllers/concerns/foreman/controller/timezone.rb:10:in `set_timezone'
 dd45d82a | /usr/share/gems/gems/activesupport-7.0.8.7/lib/active_support/callbacks.rb:127:in `block in run_callbacks'
 dd45d82a | /usr/share/foreman/app/models/concerns/foreman/thread_session.rb:32:in `clear_thread'
 dd45d82a | /usr/share/gems/gems/activesupport-7.0.8.7/lib/active_support/callbacks.rb:127:in `block in run_callbacks'
 dd45d82a | /usr/share/foreman/app/controllers/concerns/foreman/controller/topbar_sweeper.rb:12:in `set_topbar_sweeper_controller'
 dd45d82a | /usr/share/gems/gems/activesupport-7.0.8.7/lib/active_support/callbacks.rb:127:in `block in run_callbacks'
 dd45d82a | /usr/share/gems/gems/audited-5.8.0/lib/audited/sweeper.rb:16:in `around'
 dd45d82a | /usr/share/gems/gems/activesupport-7.0.8.7/lib/active_support/callbacks.rb:127:in `block in run_callbacks'
 dd45d82a | /usr/share/gems/gems/audited-5.8.0/lib/audited/sweeper.rb:16:in `around'
 dd45d82a | /usr/share/gems/gems/activesupport-7.0.8.7/lib/active_support/callbacks.rb:127:in `block in run_callbacks'
 dd45d82a | /usr/share/gems/gems/activesupport-7.0.8.7/lib/active_support/callbacks.rb:138:in `run_callbacks'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/abstract_controller/callbacks.rb:233:in `process_action'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_controller/metal/rescue.rb:23:in `process_action'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_controller/metal/instrumentation.rb:67:in `block in process_action'
 dd45d82a | /usr/share/gems/gems/activesupport-7.0.8.7/lib/active_support/notifications.rb:206:in `block in instrument'
 dd45d82a | /usr/share/gems/gems/activesupport-7.0.8.7/lib/active_support/notifications/instrumenter.rb:24:in `instrument'
 dd45d82a | /usr/share/gems/gems/activesupport-7.0.8.7/lib/active_support/notifications.rb:206:in `instrument'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_controller/metal/instrumentation.rb:66:in `process_action'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_controller/metal/params_wrapper.rb:259:in `process_action'
 dd45d82a | /usr/share/gems/gems/activerecord-7.0.8.7/lib/active_record/railties/controller_runtime.rb:27:in `process_action'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/abstract_controller/base.rb:151:in `process'
 dd45d82a | /usr/share/gems/gems/actionview-7.0.8.7/lib/action_view/rendering.rb:39:in `process'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_controller/metal.rb:188:in `dispatch'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_controller/metal.rb:251:in `dispatch'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/routing/route_set.rb:49:in `dispatch'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/routing/route_set.rb:32:in `serve'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/journey/router.rb:50:in `block in serve'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/journey/router.rb:32:in `each'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/journey/router.rb:32:in `serve'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/routing/route_set.rb:852:in `call'
 dd45d82a | /usr/share/gems/gems/katello-4.17.2/lib/katello/middleware/organization_created_enforcer.rb:18:in `call'
 dd45d82a | /usr/share/gems/gems/katello-4.17.2/lib/katello/middleware/event_daemon.rb:10:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/static.rb:23:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/static.rb:23:in `call'
 dd45d82a | /usr/share/gems/gems/apipie-dsl-2.6.2/lib/apipie_dsl/static_dispatcher.rb:67:in `call'
 dd45d82a | /usr/share/gems/gems/apipie-rails-1.4.2/lib/apipie/static_dispatcher.rb:74:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/static.rb:23:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/static.rb:23:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/static.rb:23:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/static.rb:23:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/static.rb:23:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/static.rb:23:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/static.rb:23:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/static.rb:23:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/static.rb:23:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/static.rb:23:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/static.rb:23:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/static.rb:23:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/static.rb:23:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/static.rb:23:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/static.rb:23:in `call'
 dd45d82a | /usr/share/foreman/lib/foreman/middleware/libvirt_connection_cleaner.rb:9:in `call'
 dd45d82a | /usr/share/foreman/lib/foreman/middleware/telemetry.rb:10:in `call'
 dd45d82a | /usr/share/gems/gems/apipie-rails-1.4.2/lib/apipie/middleware/checksum_in_headers.rb:27:in `call'
 dd45d82a | /usr/share/gems/gems/rack-2.2.4/lib/rack/tempfile_reaper.rb:15:in `call'
 dd45d82a | /usr/share/gems/gems/rack-2.2.4/lib/rack/etag.rb:27:in `call'
 dd45d82a | /usr/share/gems/gems/rack-2.2.4/lib/rack/conditional_get.rb:40:in `call'
 dd45d82a | /usr/share/gems/gems/rack-2.2.4/lib/rack/head.rb:12:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/http/permissions_policy.rb:38:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/http/content_security_policy.rb:39:in `call'
 dd45d82a | /usr/share/foreman/lib/foreman/middleware/logging_context_session.rb:22:in `call'
 dd45d82a | /usr/share/gems/gems/rack-2.2.4/lib/rack/session/abstract/id.rb:266:in `context'
 dd45d82a | /usr/share/gems/gems/rack-2.2.4/lib/rack/session/abstract/id.rb:260:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/cookies.rb:704:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/callbacks.rb:27:in `block in call'
 dd45d82a | /usr/share/gems/gems/activesupport-7.0.8.7/lib/active_support/callbacks.rb:99:in `run_callbacks'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/callbacks.rb:26:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/debug_exceptions.rb:28:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/show_exceptions.rb:29:in `call'
 dd45d82a | /usr/share/gems/gems/railties-7.0.8.7/lib/rails/rack/logger.rb:40:in `call_app'
 dd45d82a | /usr/share/gems/gems/railties-7.0.8.7/lib/rails/rack/logger.rb:27:in `call'
 dd45d82a | /usr/share/gems/gems/sprockets-rails-3.5.2/lib/sprockets/rails/quiet_assets.rb:17:in `call'
 dd45d82a | /usr/share/foreman/lib/foreman/middleware/logging_context_request.rb:11:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/remote_ip.rb:93:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/request_id.rb:26:in `call'
 dd45d82a | /usr/share/gems/gems/katello-4.17.2/lib/katello/prevent_json_parsing.rb:12:in `call'
 dd45d82a | /usr/share/gems/gems/rack-2.2.4/lib/rack/method_override.rb:24:in `call'
 dd45d82a | /usr/share/gems/gems/rack-2.2.4/lib/rack/runtime.rb:22:in `call'
 dd45d82a | /usr/share/gems/gems/activesupport-7.0.8.7/lib/active_support/cache/strategy/local_cache_middleware.rb:29:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/executor.rb:14:in `call'
 dd45d82a | /usr/share/gems/gems/rack-2.2.4/lib/rack/sendfile.rb:110:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/ssl.rb:77:in `call'
 dd45d82a | /usr/share/gems/gems/actionpack-7.0.8.7/lib/action_dispatch/middleware/host_authorization.rb:131:in `call'
 dd45d82a | /usr/share/gems/gems/rack-cors-1.1.1/lib/rack/cors.rb:100:in `call'
 dd45d82a | /usr/share/gems/gems/secure_headers-7.1.0/lib/secure_headers/middleware.rb:11:in `call'
 dd45d82a | /usr/share/gems/gems/elastic-apm-4.7.3/lib/elastic_apm/middleware.rb:36:in `call'
 dd45d82a | /usr/share/gems/gems/railties-7.0.8.7/lib/rails/engine.rb:530:in `call'
 dd45d82a | /usr/share/gems/gems/railties-7.0.8.7/lib/rails/railtie.rb:226:in `public_send'
 dd45d82a | /usr/share/gems/gems/railties-7.0.8.7/lib/rails/railtie.rb:226:in `method_missing'
 dd45d82a | /usr/share/gems/gems/rack-2.2.4/lib/rack/urlmap.rb:74:in `block in call'
 dd45d82a | /usr/share/gems/gems/rack-2.2.4/lib/rack/urlmap.rb:58:in `each'
 dd45d82a | /usr/share/gems/gems/rack-2.2.4/lib/rack/urlmap.rb:58:in `call'
 dd45d82a | /usr/share/gems/gems/puma-6.6.0/lib/puma/configuration.rb:279:in `call'
 dd45d82a | /usr/share/gems/gems/puma-6.6.0/lib/puma/request.rb:99:in `block in handle_request'
 dd45d82a | /usr/share/gems/gems/puma-6.6.0/lib/puma/thread_pool.rb:390:in `with_force_shutdown'
 dd45d82a | /usr/share/gems/gems/puma-6.6.0/lib/puma/request.rb:98:in `handle_request'
 dd45d82a | /usr/share/gems/gems/puma-6.6.0/lib/puma/server.rb:472:in `process_client'
 dd45d82a | /usr/share/gems/gems/puma-6.6.0/lib/puma/server.rb:254:in `block in run'
 dd45d82a | /usr/share/gems/gems/puma-6.6.0/lib/puma/thread_pool.rb:167:in `block in spawn_thread'
 dd45d82a | /usr/share/gems/gems/logging-2.4.0/lib/logging/diagnostic_context.rb:474:in `block in create_with_logging_context'
2025-12-01T14:30:45 [I|app|dd45d82a]   Rendered common/500.html.erb within layouts/application (Duration: 2.9ms | Allocations: 979)
2025-12-01T14:30:45 [I|app|dd45d82a]   Rendered layouts/base.html.erb (Duration: 5.2ms | Allocations: 3085)
2025-12-01T14:30:45 [I|app|dd45d82a]   Rendered layout layouts/application.html.erb (Duration: 9.6ms | Allocations: 4486)
2025-12-01T14:30:45 [I|app|dd45d82a] Completed 500 Internal Server Error in 66ms (Views: 10.7ms | ActiveRecord: 4.2ms | Allocations: 19563)

Did you run foreman-installer after each upgrade? It should have run seeds and upgrade rake tasks, which would have prevented this.

I think you should still be able to run this manually:

foreman-rake katello:upgrades:4.12:update_content_access_modes

In production.log you should see something like


---------
Set content access mode for 1 organizations
---------


and then it should be fixed.

Thanks for the fast reply. I ran the installer after every Update. Is it a big change? Can something go wrong?

I will create a db backup before :smiley:

That’s always the best, but this operation isn’t especially risky so I wouldn’t worry :slight_smile:

Ahh and i found foreman-rake katello:upgrades:4.12:update_content_access_modes[dry_run] which indeed said it would change 1 organization.

1 Like

This should also explain why several Subscription based and subscription-manager changes do not occur on our Foreman Instance…

It worked as expected. The only thing we needed to change, was an if statement in Puppet ,because subscription-manager set the fact subscription_managed=true before the SCA migration. After that it was subscription_managed=false. We solved it with a custom fact in /etc/facter/facts.d/

1 Like