What is the current state of the art concerning CentOS 7 errata?

Looking to populate CentOS 7 errata w/ Foreman 3.11, katello 4.3
While we are moving away from CentOS, I still have a couple of hundred installs that need to be patched.
All of the solutions I’ve come across so far seem to be deprecated and/or not applicable to this set of Foreman versions.
Is there a current solution? Or did I just miss something obvious.

Does this help?

So, I started working with these tools, but they generally use the pulp-admin command from the previous version if pulp. Before trying to (re)construct the functionality, I was thinking that somebody out there must have come across the same issue and found a solution.
Thanks for the input, much appreciated.

This is roughly what we do in our environment.