diff --git a/common/deploy-steps.j2 b/common/deploy-steps.j2
index 4ff08008bc..eea1ff680a 100644
--- a/common/deploy-steps.j2
+++ b/common/deploy-steps.j2
@@ -833,6 +833,7 @@ outputs:
                 docker_puppet_process_count: DOCKER_PUPPET_PROCESS_COUNT
                 docker_puppet_mount_host_puppet: DOCKER_PUPPET_MOUNT_HOST_PUPPET
                 tripleo_minor_update: true
+                tripleo_redhat_enforce: {{role.rhsm_enforce|default("true")}}
               tasks:
                 - import_tasks: hiera_steps_tasks.yaml
                 - import_tasks: common_container_config_scripts.yaml
diff --git a/roles/CephFile.yaml b/roles/CephFile.yaml
index e52885d340..575a391273 100644
--- a/roles/CephFile.yaml
+++ b/roles/CephFile.yaml
@@ -15,6 +15,7 @@
   HostnameFormatDefault: '%stackname%-ceph-file-%index%'
   # CephOSD present so serial has to be 1
   update_serial: 1
+  rhsm_enforce: False
   ServicesDefault:
     - OS::TripleO::Services::Aide
     - OS::TripleO::Services::AuditD
diff --git a/roles/CephObject.yaml b/roles/CephObject.yaml
index 8c1721aae8..e629deadc8 100644
--- a/roles/CephObject.yaml
+++ b/roles/CephObject.yaml
@@ -15,6 +15,7 @@
   HostnameFormatDefault: '%stackname%-ceph-object-%index%'
   # CephOSD present so serial has to be 1
   update_serial: 1
+  rhsm_enforce: False
   ServicesDefault:
     - OS::TripleO::Services::Aide
     - OS::TripleO::Services::AuditD
diff --git a/roles/CephStorage.yaml b/roles/CephStorage.yaml
index f32647c2b6..2fb62a15a3 100644
--- a/roles/CephStorage.yaml
+++ b/roles/CephStorage.yaml
@@ -16,6 +16,7 @@
   deprecated_nic_config_name: 'ceph-storage.yaml'
   # CephOSD present so serial has to be 1
   update_serial: 1
+  rhsm_enforce: False
   ServicesDefault:
     - OS::TripleO::Services::Aide
     - OS::TripleO::Services::AuditD
diff --git a/roles/README.rst b/roles/README.rst
index f1a359843c..feaff8e956 100644
--- a/roles/README.rst
+++ b/roles/README.rst
@@ -72,6 +72,12 @@ Role Options
    configuration would be skipped for the role. The names should match
    those defined in network_data.yaml
 
+* rhsm_enforce: (boolean), optional, default to true. Some role may
+  not follow the EUS stream constraint, like CephOSD or composed Ceph
+  Mon/Mgr. This switch ensures that we can model this and disable the
+  check when it is not needed. Note that on non Red Hat environment
+  this switch has no effect.
+
 Working with Roles
 ==================
 The tripleoclient provides a series of commands that can be used to view
diff --git a/roles_data.yaml b/roles_data.yaml
index eefed58051..ae68469036 100644
--- a/roles_data.yaml
+++ b/roles_data.yaml
@@ -391,6 +391,7 @@
   deprecated_nic_config_name: 'ceph-storage.yaml'
   # CephOSD present so serial has to be 1
   update_serial: 1
+  rhsm_enforce: False
   ServicesDefault:
     - OS::TripleO::Services::Aide
     - OS::TripleO::Services::AuditD