From 4268a4e38593b2622b966e1da8b63715a3e85ec1 Mon Sep 17 00:00:00 2001 From: Ashwin Das Date: Thu, 23 Apr 2026 23:24:25 -0400 Subject: [PATCH] ART-14263: Migrate OCP 4.12 RPM repos to R2 CloudFlare Replace mirror2.openshift.com with the Cloudflare Workers R2 endpoint (openshift-mirror-list.ci-systems.workers.dev) for all OCP 4.12 RPM repository files to eliminate CloudFront egress costs. This is a pilot migration for 4.12 only. Once validated in CI, the same change will be rolled out to remaining OCP versions. Changes: - Updated baseurl in 14 ocp-4.12-*.repo files - Preserved all path structures and authentication configuration - Includes default, multi-arch (ppc64le, s390x, aarch64), RHEL variants, ironic, and OpenStack repos Jira: https://redhat.atlassian.net/browse/ART-14263 Made-with: Cursor --- core-services/release-controller/_repos/ocp-4.12-default.repo | 2 +- .../release-controller/_repos/ocp-4.12-openstack-beta.repo | 2 +- core-services/release-controller/_repos/ocp-4.12-openstack.repo | 2 +- core-services/release-controller/_repos/ocp-4.12-ppc64le.repo | 2 +- .../_repos/ocp-4.12-rhel-8-ironic-prevalidation.repo | 2 +- .../_repos/ocp-4.12-rhel-8-server-ironic.repo | 2 +- .../_repos/ocp-4.12-rhel-9-ironic-prevalidation.repo | 2 +- .../_repos/ocp-4.12-rhel-9-server-ironic.repo | 2 +- .../release-controller/_repos/ocp-4.12-rhel8-aarch64.repo | 2 +- core-services/release-controller/_repos/ocp-4.12-rhel8.repo | 2 +- core-services/release-controller/_repos/ocp-4.12-rhel86.repo | 2 +- core-services/release-controller/_repos/ocp-4.12-rhel9.repo | 2 +- core-services/release-controller/_repos/ocp-4.12-rhel90.repo | 2 +- core-services/release-controller/_repos/ocp-4.12-s390x.repo | 2 +- 14 files changed, 14 insertions(+), 14 deletions(-) diff --git a/core-services/release-controller/_repos/ocp-4.12-default.repo b/core-services/release-controller/_repos/ocp-4.12-default.repo index 59547bed6506e..c382e85ef36b5 100644 --- a/core-services/release-controller/_repos/ocp-4.12-default.repo +++ b/core-services/release-controller/_repos/ocp-4.12-default.repo @@ -30,7 +30,7 @@ gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release ht [rhel-server-ose] name = rhel-server-ose -baseurl = https://mirror2.openshift.com/enterprise/reposync/4.12/rhel-server-ose-rpms/ +baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/4.12/rhel-server-ose-rpms/ sslverify = false username_file=/tmp/mirror-enterprise-basic-auth/username password_file=/tmp/mirror-enterprise-basic-auth/password diff --git a/core-services/release-controller/_repos/ocp-4.12-openstack-beta.repo b/core-services/release-controller/_repos/ocp-4.12-openstack-beta.repo index a7e6d150e7408..9b9e4566d24d2 100644 --- a/core-services/release-controller/_repos/ocp-4.12-openstack-beta.repo +++ b/core-services/release-controller/_repos/ocp-4.12-openstack-beta.repo @@ -1,6 +1,6 @@ [openstack-beta-rhel8] name = rhel-openstack -baseurl = https://mirror2.openshift.com/enterprise/reposync/4.12/openstack-beta-for-rhel-8-rpms +baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/4.12/openstack-beta-for-rhel-8-rpms sslverify = false username_file=/tmp/mirror-enterprise-basic-auth/username password_file=/tmp/mirror-enterprise-basic-auth/password diff --git a/core-services/release-controller/_repos/ocp-4.12-openstack.repo b/core-services/release-controller/_repos/ocp-4.12-openstack.repo index fc75f59e48fdf..6d72ce213c75f 100644 --- a/core-services/release-controller/_repos/ocp-4.12-openstack.repo +++ b/core-services/release-controller/_repos/ocp-4.12-openstack.repo @@ -1,6 +1,6 @@ [openstack-16-rhel8] name = rhel-openstack -baseurl = https://mirror2.openshift.com/enterprise/reposync/4.12/openstack-16-for-rhel-8-rpms +baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/4.12/openstack-16-for-rhel-8-rpms sslverify = false username_file=/tmp/mirror-enterprise-basic-auth/username password_file=/tmp/mirror-enterprise-basic-auth/password diff --git a/core-services/release-controller/_repos/ocp-4.12-ppc64le.repo b/core-services/release-controller/_repos/ocp-4.12-ppc64le.repo index c0f56a94e9311..f8c4b134dc9c6 100644 --- a/core-services/release-controller/_repos/ocp-4.12-ppc64le.repo +++ b/core-services/release-controller/_repos/ocp-4.12-ppc64le.repo @@ -30,7 +30,7 @@ gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release ht [rhel-server-ose] name = rhel-server-ose -baseurl = https://mirror2.openshift.com/enterprise/reposync/4.12_ppc64le/rhel-server-ose-rpms/ +baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/4.12_ppc64le/rhel-server-ose-rpms/ sslverify = false username_file=/tmp/mirror-enterprise-basic-auth/username password_file=/tmp/mirror-enterprise-basic-auth/password diff --git a/core-services/release-controller/_repos/ocp-4.12-rhel-8-ironic-prevalidation.repo b/core-services/release-controller/_repos/ocp-4.12-rhel-8-ironic-prevalidation.repo index 2e045f7f3ceb0..44e760b561b16 100644 --- a/core-services/release-controller/_repos/ocp-4.12-rhel-8-ironic-prevalidation.repo +++ b/core-services/release-controller/_repos/ocp-4.12-rhel-8-ironic-prevalidation.repo @@ -1,6 +1,6 @@ [rhel-8-ironic-prevalidation] name = rhel-8-ironic-prevalidation -baseurl = https://mirror2.openshift.com/enterprise/reposync/ci-ironic/rhaos-4.12-rhel-8-ironic-prevalidation/x86_64/os/ +baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/ci-ironic/rhaos-4.12-rhel-8-ironic-prevalidation/x86_64/os/ enabled = 0 sslverify = false username_file=/tmp/mirror-enterprise-basic-auth/username diff --git a/core-services/release-controller/_repos/ocp-4.12-rhel-8-server-ironic.repo b/core-services/release-controller/_repos/ocp-4.12-rhel-8-server-ironic.repo index 78d6e4cec3dcc..f28fad0cd2891 100644 --- a/core-services/release-controller/_repos/ocp-4.12-rhel-8-server-ironic.repo +++ b/core-services/release-controller/_repos/ocp-4.12-rhel-8-server-ironic.repo @@ -1,6 +1,6 @@ [rhel-8-server-ironic-rpms] name = rhel-8-server-ironic-rpms -baseurl = https://mirror2.openshift.com/enterprise/reposync/4.12/rhel-8-server-ironic-rpms/ +baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/4.12/rhel-8-server-ironic-rpms/ enabled = 1 sslverify = false username_file=/tmp/mirror-enterprise-basic-auth/username diff --git a/core-services/release-controller/_repos/ocp-4.12-rhel-9-ironic-prevalidation.repo b/core-services/release-controller/_repos/ocp-4.12-rhel-9-ironic-prevalidation.repo index 0a9ed3531d640..d6c98e6316408 100644 --- a/core-services/release-controller/_repos/ocp-4.12-rhel-9-ironic-prevalidation.repo +++ b/core-services/release-controller/_repos/ocp-4.12-rhel-9-ironic-prevalidation.repo @@ -1,6 +1,6 @@ [rhel-9-ironic-prevalidation] name = rhel-9-ironic-prevalidation -baseurl = https://mirror2.openshift.com/enterprise/reposync/ci-ironic/rhaos-4.12-ironic-rhel-9-prevalidation/x86_64/os/ +baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/ci-ironic/rhaos-4.12-ironic-rhel-9-prevalidation/x86_64/os/ enabled = 0 sslverify = false username_file=/tmp/mirror-enterprise-basic-auth/username diff --git a/core-services/release-controller/_repos/ocp-4.12-rhel-9-server-ironic.repo b/core-services/release-controller/_repos/ocp-4.12-rhel-9-server-ironic.repo index c17644d111f84..37d8d71cee729 100644 --- a/core-services/release-controller/_repos/ocp-4.12-rhel-9-server-ironic.repo +++ b/core-services/release-controller/_repos/ocp-4.12-rhel-9-server-ironic.repo @@ -1,6 +1,6 @@ [rhel-9-server-ironic-rpms] name = rhel-9-server-ironic-rpms -baseurl = https://mirror2.openshift.com/enterprise/reposync/4.12/rhel-9-server-ironic-rpms/ +baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/4.12/rhel-9-server-ironic-rpms/ enabled = 1 sslverify = false username_file=/tmp/mirror-enterprise-basic-auth/username diff --git a/core-services/release-controller/_repos/ocp-4.12-rhel8-aarch64.repo b/core-services/release-controller/_repos/ocp-4.12-rhel8-aarch64.repo index cf4b8a5b3703e..6bbb2f8203c87 100644 --- a/core-services/release-controller/_repos/ocp-4.12-rhel8-aarch64.repo +++ b/core-services/release-controller/_repos/ocp-4.12-rhel8-aarch64.repo @@ -38,7 +38,7 @@ failovermethod = priority name = rhel-8-server-ose # Using mirror until aarch64 content released to CDN # See: https://github.com/openshift/release/pull/23111#discussion_r739417374 -baseurl = https://mirror2.openshift.com/enterprise/reposync/4.12_aarch64/rhel-8-server-ose-rpms +baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/4.12_aarch64/rhel-8-server-ose-rpms gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted sslverify = false gpgcheck = 0 diff --git a/core-services/release-controller/_repos/ocp-4.12-rhel8.repo b/core-services/release-controller/_repos/ocp-4.12-rhel8.repo index 3d15bb33fa540..7987c754de518 100644 --- a/core-services/release-controller/_repos/ocp-4.12-rhel8.repo +++ b/core-services/release-controller/_repos/ocp-4.12-rhel8.repo @@ -48,7 +48,7 @@ failovermethod = priority [rhel-8-server-ose] name = rhel-8-server-ose -baseurl = https://mirror2.openshift.com/enterprise/reposync/4.12/rhel-8-server-ose-rpms +baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/4.12/rhel-8-server-ose-rpms enabled = 1 gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted sslverify = false diff --git a/core-services/release-controller/_repos/ocp-4.12-rhel86.repo b/core-services/release-controller/_repos/ocp-4.12-rhel86.repo index 4361b21e5952e..bb39233735055 100644 --- a/core-services/release-controller/_repos/ocp-4.12-rhel86.repo +++ b/core-services/release-controller/_repos/ocp-4.12-rhel86.repo @@ -48,7 +48,7 @@ failovermethod = priority [rhel-8.6-server-ose-4.12] name = rhel-8.6-server-ose-4.12 -baseurl = https://mirror2.openshift.com/enterprise/reposync/4.12/rhel-8-server-ose-rpms +baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/4.12/rhel-8-server-ose-rpms enabled = 1 gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted sslverify = false diff --git a/core-services/release-controller/_repos/ocp-4.12-rhel9.repo b/core-services/release-controller/_repos/ocp-4.12-rhel9.repo index d5181bfbd3169..cbc96081f9406 100644 --- a/core-services/release-controller/_repos/ocp-4.12-rhel9.repo +++ b/core-services/release-controller/_repos/ocp-4.12-rhel9.repo @@ -48,7 +48,7 @@ failovermethod = priority [rhel-9-server-ose] name = rhel-9-server-ose -baseurl = https://mirror2.openshift.com/enterprise/reposync/4.12/rhel-9-server-ose-rpms +baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/4.12/rhel-9-server-ose-rpms enabled = 1 gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted sslverify = false diff --git a/core-services/release-controller/_repos/ocp-4.12-rhel90.repo b/core-services/release-controller/_repos/ocp-4.12-rhel90.repo index cd5f42935544c..2cb051b0bef92 100644 --- a/core-services/release-controller/_repos/ocp-4.12-rhel90.repo +++ b/core-services/release-controller/_repos/ocp-4.12-rhel90.repo @@ -48,7 +48,7 @@ failovermethod = priority [rhel-9.0-server-ose] name = rhel-9.0-server-ose-4.12 -baseurl = https://mirror2.openshift.com/enterprise/reposync/4.12/rhel-9-server-ose-rpms +baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/4.12/rhel-9-server-ose-rpms enabled = 1 gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted sslverify = false diff --git a/core-services/release-controller/_repos/ocp-4.12-s390x.repo b/core-services/release-controller/_repos/ocp-4.12-s390x.repo index f8228b6fab88c..9c5de7a73c669 100644 --- a/core-services/release-controller/_repos/ocp-4.12-s390x.repo +++ b/core-services/release-controller/_repos/ocp-4.12-s390x.repo @@ -30,7 +30,7 @@ gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release ht [rhel-server-ose] name = rhel-server-ose -baseurl = https://mirror2.openshift.com/enterprise/reposync/4.12_s390x/rhel-server-ose-rpms/ +baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/4.12_s390x/rhel-server-ose-rpms/ sslverify = false username_file=/tmp/mirror-enterprise-basic-auth/username password_file=/tmp/mirror-enterprise-basic-auth/password