Concelier VMware Connector - Operations Runbook

Last updated: 2026-01-16

This runbook is for operators who run the VMware connector in a Stella Ops Concelier instance. It covers configuration, offline mirroring, and the failure modes specific to VMware security advisories.

1. Overview

The VMware connector ingests VMware security advisories (VMSAs) and maps them to canonical advisory IDs so the Stella Ops scanner can correlate VMware findings against the canonical advisory store.

2. Authentication

No authentication required for public advisories.

3. Configuration (`concelier.yaml`)

concelier:
  sources:
    vmware:
      baseUri: "<vmware-advisory-base>"
      maxDocumentsPerFetch: 20
      fetchTimeout: "00:00:45"
      requestDelay: "00:00:00"

4. Offline and air-gapped deployments

Mirror advisories into the Offline Kit and repoint baseUri to the mirror. See the mirror operations guide for staging and verification steps.

5. Common failure modes