From b82d6825d925374fafeefe18db21e62db88eadb0 Mon Sep 17 00:00:00 2001 From: Chai Bot Date: Mon, 18 May 2026 15:38:40 +0000 Subject: [PATCH] chai-bot: fix ocp-5.0-rhel102.repo mirror2 auth Switch rhel-10.2-baseos, rhel-10.2-appstream, rhel-10.2-nfv, and rhel-10.2-highavailability from sslclientkey/sslclientcert (CDN cert auth) to username_file/password_file (basic auth via /tmp/mirror-enterprise-basic-auth/), matching the working ocp-4.22-rhel102.repo structure. mirror2.openshift.com/enterprise/reposync/ requires basic auth on these paths; the CDN client cert results in HTTP 401, which was surfacing as repomd.xml download failures from base-5-0-rhel102.ocp.svc.cluster.local in openshift/os PR jobs. Also adds skip_if_unavailable = true to those four sections, consistent with the rhel-10.2-server-ose-5.0 and rhel-10.2-early-kernel sections that were already correct. --- .../_repos/ocp-5.0-rhel102.repo | 20 +++++++++++-------- 1 file changed, 12 insertions(+), 8 deletions(-) diff --git a/core-services/release-controller/_repos/ocp-5.0-rhel102.repo b/core-services/release-controller/_repos/ocp-5.0-rhel102.repo index 07774e84d7de8..9b31d9c480da9 100644 --- a/core-services/release-controller/_repos/ocp-5.0-rhel102.repo +++ b/core-services/release-controller/_repos/ocp-5.0-rhel102.repo @@ -5,9 +5,10 @@ enabled = 1 gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted sslverify = false gpgcheck = 0 -sslclientkey = /tmp/key/rh-cdn.pem -sslclientcert = /tmp/key/rh-cdn.pem +username_file = /tmp/mirror-enterprise-basic-auth/username +password_file = /tmp/mirror-enterprise-basic-auth/password failovermethod = priority +skip_if_unavailable = true [rhel-10.2-appstream] name = rhel-10.2-appstream @@ -16,9 +17,10 @@ enabled = 1 gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted sslverify = false gpgcheck = 0 -sslclientkey = /tmp/key/rh-cdn.pem -sslclientcert = /tmp/key/rh-cdn.pem +username_file = /tmp/mirror-enterprise-basic-auth/username +password_file = /tmp/mirror-enterprise-basic-auth/password failovermethod = priority +skip_if_unavailable = true [rhel-10.2-nfv] name = rhel-10.2-nfv @@ -27,9 +29,10 @@ enabled = 1 gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted sslverify = false gpgcheck = 0 -sslclientkey = /tmp/key/rh-cdn.pem -sslclientcert = /tmp/key/rh-cdn.pem +username_file = /tmp/mirror-enterprise-basic-auth/username +password_file = /tmp/mirror-enterprise-basic-auth/password failovermethod = priority +skip_if_unavailable = true [rhel-10.2-highavailability] name = rhel-10.2-highavailability @@ -38,9 +41,10 @@ enabled = 1 gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted sslverify = false gpgcheck = 0 -sslclientkey = /tmp/key/rh-cdn.pem -sslclientcert = /tmp/key/rh-cdn.pem +username_file = /tmp/mirror-enterprise-basic-auth/username +password_file = /tmp/mirror-enterprise-basic-auth/password failovermethod = priority +skip_if_unavailable = true [rhel-10.2-fast-datapath] name = rhel-10.2-fast-datapath