Concelier SUSE OVAL/CSAF Connector - Operations Runbook

Last updated: 2026-01-16

This runbook is for operators who run the SUSE connector in a Stella Ops Concelier instance. It covers configuration, offline mirroring, and the failure modes specific to SUSE’s OVAL/CSAF feeds.

1. Overview

The SUSE connector ingests SUSE OVAL/CSAF advisories and maps them to SUSE package versions so the Stella Ops scanner can resolve fixed-versus-affected state per product.

2. Authentication

No authentication required for public feeds.

3. Configuration (`concelier.yaml`)

concelier:
  sources:
    suse:
      baseUri: "<suse-csaf-base>"
      maxDocumentsPerFetch: 20
      fetchTimeout: "00:00:45"
      requestDelay: "00:00:00"

4. Offline and air-gapped deployments

Mirror the CSAF feeds into the Offline Kit and repoint baseUri to the mirror. See the mirror operations guide for staging and verification steps.

5. Common failure modes