Concelier Red Hat OVAL/CSAF Connector - Operations Runbook

Last updated: 2026-01-16

This runbook is for operators who run the Red Hat connector in a Stella Ops Concelier instance. It covers authentication, configuration, offline/air-gapped deployment, and the common failure modes to watch for.

1. Overview

The Red Hat connector ingests Red Hat OVAL/CSAF advisories and maps them to RHEL package versions.

2. Authentication

No authentication required for public feeds.

3. Configuration (`concelier.yaml`)

concelier:
  sources:
    redhat:
      baseUri: "<redhat-csaf-base>"
      maxDocumentsPerFetch: 20
      fetchTimeout: "00:00:45"
      requestDelay: "00:00:00"

4. Offline and air-gapped deployments

Mirror the CSAF feeds into the Offline Kit and repoint baseUri to the mirror.

5. Common failure modes