Hey, issue I had. I’m using errata from private repo updates http://updateinfo-origin.cefs.steve-meier.de/7-sync/updates/x86_64/repodata/. Updateinfo/errata file is hidden and password protected.
Since Katello 3.16, since yum content was migrated to pulp3, I was seeing a lot more errata applicable on main server Content host page but when running yum update-minimal --security --bugfix I would see no packages marked for minimal update.
After digging deeper here Package/errata info disappears after a while on Content hosts page/Foreman 2.1.2 we’ve found that since pulp3 is ruuning on main server it is showing correct data, while pulp2 which is running on smart proxy is filtering out any errata that refrecened packages are not part of updates.
Workaround which works is mirroring locally official centos repos os and extras, modifying repodata to include errata in each and then syncing. Pulp3 knows this is duplicate so it merges them into one. But when pulp2 which is running on smart proxies sync it, it keeps all errata, but spread across os, extras, updates repos.
So basically this way you can import errata through repos without the need for any script or anything custom inside Foreman. All you need is a server to mirror official centos repos, modified to include updateinfo/errata.