Comment 3 for bug 1854685

I am finally able to reproduce it to rhel8 ubi image which has older version of rhui rpm installed there.

When we try to install new RHUI rpm on RHEL8 rdocloud image.
[cloud-user@rhel8dib ~]$ sudo yum -y install rdo-rhui-2.2-1.noarch.rpm
Last metadata expiration check: 0:02:54 ago on Tue 03 Dec 2019 01:25:50 AM EST.
Dependencies resolved.
==============================================================================================================================================================================
 Package Arch Version Repository Size
==============================================================================================================================================================================
Installing:
 rdo-rhui noarch 2.2-1 @commandline 8.2 k

Transaction Summary
==============================================================================================================================================================================
Install 1 Package

Total size: 8.2 k
Installed size: 10 k
Downloading Packages:
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing : 1/1
  Installing : rdo-rhui-2.2-1.noarch 1/1
  Running scriptlet: rdo-rhui-2.2-1.noarch 1/1
warning: /etc/pki/rhui/key.pem saved as /etc/pki/rhui/key.pem.rpmorig
warning: /etc/pki/rhui/product/content.crt saved as /etc/pki/rhui/product/content.crt.rpmorig
warning: /etc/yum.repos.d/rh-cloud.repo saved as /etc/yum.repos.d/rh-cloud.repo.rpmorig

  Verifying : rdo-rhui-2.2-1.noarch 1/1

Installed:
  rdo-rhui-2.2-1.noarch

Complete!

And when we do on normal ubi image then

[root@c0ce26e339f0 /]# yum install http://file.rdu.redhat.com/~apevec/OSP/rdo-rhui-2.2-1.noarch.rpm
Updating Subscription Management repositories.
Unable to read consumer identity
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
Red Hat Universal Base Image 8 (RPMs) - BaseOS 356 kB/s | 759 kB 00:02
Red Hat Universal Base Image 8 (RPMs) - AppStream 1.2 MB/s | 3.1 MB 00:02
Red Hat Universal Base Image 8 (RPMs) - CodeReady Builder 2.6 kB/s | 9.1 kB 00:03
rdo-rhui-2.2-1.noarch.rpm 9.9 kB/s | 8.2 kB 00:00
Dependencies resolved.
==============================================================================================================================================================================
 Package Architecture Version Repository Size
==============================================================================================================================================================================
Installing:
 rdo-rhui noarch 2.2-1 @commandline 8.2 k

Transaction Summary
==============================================================================================================================================================================
Install 1 Package

Total size: 8.2 k
Installed size: 10 k
Is this ok [y/N]: y
Downloading Packages:
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing : 1/1
  Installing : rdo-rhui-2.2-1.noarch 1/1
  Running scriptlet: rdo-rhui-2.2-1.noarch 1/1
  Verifying : rdo-rhui-2.2-1.noarch 1/1
Installed products updated.

Installed:
  rdo-rhui-2.2-1.noarch

Complete!
[root@c0ce26e339f0 /]# yum repolist
Red Hat CodeReady Linux Builder for RHEL 8 x86_64 (RPMs) from RHUI 0.0 B/s | 0 B 00:00
Failed to download metadata for repo 'rhui-codeready-builder-for-rhel-8-x86_64-rhui-rpms'
Error: Failed to download metadata for repo 'rhui-codeready-builder-for-rhel-8-x86_64-rhui-rpms'
[root@c0ce26e339f0 /]#

The certs are not getting updated, leading to the issue.