I have the following in my cloud-init:

rh_subscription:
  activation-key: TEST
  org: Default
  server-hostname: test.example.com

When I provision an instance and review the logs I see the following:

cc_rh_subscription.py[WARNING]: Registration failed due to: Error: CA certificate for subscription service has not been installed.

I would assume that obtaining the satellite ca certificate would be a part of the registration process, but I guess not.

I don't see any ca-certificate options for rh_subscription in https://docs.cloud-init.io/en/latest/reference/modules.html#mod-cc-rh-subscription for the module, and I'm not sure that I want to include the katello ca certificate in the ca_certs cloud-init module as of yet to see if that will work.

I'm using an image built from RedHat's image builder service. Curious to see how anyone is utilizing rh_subscription cloud-init module and how they overcome the same situation.