ART-18749: Use GA content for RHEL 9.8 repos in 4.22, 4.23, and 5.0#79773
Conversation
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Repository YAML (base), Central YAML (inherited) Review profile: CHILL Plan: Enterprise Run ID: 📒 Files selected for processing (3)
WalkthroughThree OpenShift repository configuration files (OCP 4.22, 4.23, and 5.0 targeting RHEL 9) are updated to migrate from OpenShift reposync mirrors to Red Hat CDN endpoints, replacing HTTP basic-auth with TLS client certificate authentication across all CPU architectures and repository types. ChangesCDN Repository Migration for OCP RHEL9
Estimated code review effort🎯 3 (Moderate) | ⏱️ ~20 minutes Possibly related PRs
Suggested reviewers
Important Pre-merge checks failedPlease resolve all errors before merging. Addressing warnings is optional. ❌ Failed checks (1 error)
✅ Passed checks (14 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
This change updates the RHEL 9 repository configurations for OpenShift 4.22, 4.23, and 5.0 to point directly to cdn.redhat.com instead of using the mirror2.openshift.com reposync URLs. Context: - PR openshift-eng/ocp-build-data#10723 disabled reposync for RHEL 9.8 repositories in the 5.0 stream - This means repos are no longer being synced to mirror2, causing package download failures and 404 errors in CI - The CI jobs need to consume RHEL 9.8 GA content directly from CDN Related: - openshift-eng/ocp-build-data#10723 - openshift-eng/ocp-build-data#10790 - openshift-eng/ocp-build-data#10791 rh-pre-commit.version: 2.4.0 rh-pre-commit.check-secrets: ENABLED
locriandev
force-pushed
the
fix-rhel9-cdn-repos
branch
from
5933623 to
d512392
Compare
locriandev
changed the title
openshift-ci-robot
added
the
jira/valid-reference
|
@locriandev: This pull request references ART-18749 which is a valid jira issue. Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "5.0.0" version, but no target version was set. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
@locriandev: |
|
@coderabbitai[bot]: your |
openshift-merge-bot
Bot
added
the
rehearsals-ack
|
[REHEARSALNOTIFIER] Note: If this PR includes changes to step registry files ( Interacting with pj-rehearseComment: Once you are satisfied with the results of the rehearsals, comment: |
|
/lgtm |
|
@sosiouxme please approve this when you have a moment, thanks! |
|
/assign @sosiouxme |
|
/lgtm |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: danilo-gemoli, elfosardo, locriandev The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
openshift-ci
Bot
added
the
approved
|
@locriandev: all tests passed! Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
|
@locriandev: Updated the following 16 configmaps:
DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
azure-cli >= 2.73.0 requires python3.12, which is not available in the E4S/EUS repos that CI now uses after openshift/release#79773 switched from mirror2.openshift.com (GA content) to cdn.redhat.com. Pin to the last version (2.72.0) that depends on python3.9, which is available in E4S. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
5 participants
Summary
This PR updates the RHEL 9 repository configurations for OpenShift 4.22, 4.23, and 5.0 to point directly to cdn.redhat.com instead of using the mirror2.openshift.com reposync URLs.
Context
Changes
Repository Source Migration to cdn.redhat.com
OCP 5.0 (
ocp-5.0-rhel9.repo)OCP 4.22 (
ocp-4.22-rhel9.repo)OCP 4.23 (
ocp-4.23-rhel9.repo)Authentication Changes
For all CDN-backed repos:
username_file,password_file)sslclientkeyandsslclientcertpointing to/tmp/key/rh-cdn.pemRepositories Updated
rhel-9-baseos(E4S:cdn.redhat.com/content/e4s/rhel9/9.8/{arch}/baseos/os/)rhel-9-appstream(E4S:cdn.redhat.com/content/e4s/rhel9/9.8/{arch}/appstream/os/)rhel-9-nfv(E4S:cdn.redhat.com/content/e4s/rhel9/9.8/{arch}/nfv/os/)rhel-9-highavailability(E4S:cdn.redhat.com/content/e4s/rhel9/9.8/{arch}/highavailability/os/)rhel-9-codeready-builder(EUS:cdn.redhat.com/content/eus/rhel9/9.8/{arch}/codeready-builder/os/)Unchanged Repositories
rhel-9-server-ose-rpms(OpenShift-specific, continues to use mirror2 reposync)rhel-9-fast-datapath(already using cdn.redhat.com)rhel-9.8-early-kernel(uses OSE plashet repo)Benefits
Related Issues
This fixes the CI failures reported in the Slack thread where packages like
mtoolswere getting 404 errors:Example error:
Related PRs
ocp-build-data PRs that disabled reposync for these repos:
Similar pattern used in:
Summary by CodeRabbit
This PR updates the CI infrastructure's RHEL 9 repository configurations for three OpenShift streams (4.22, 4.23, and 5.0) to directly access Red Hat's CDN instead of relying on OpenShift's internal mirror infrastructure.
Problem Being Solved:
The OpenShift reposync service that mirrors content to
mirror2.openshift.comwas disabled for RHEL 9.8 content. This caused package repositories to stop syncing to the mirror, resulting in CI failures with 404 errors when trying to download packages (e.g., mtools in referenced examples). This PR eliminates the dependency on the reposync mirror for RHEL 9.8 by pointing directly tocdn.redhat.com.Infrastructure Changes:
Three repository configuration files (
ocp-4.22-rhel9.repo,ocp-4.23-rhel9.repo, andocp-5.0-rhel9.repo) are updated to:mirror2.openshift.com/enterprise/reposync/URLs with direct CDN endpoints (cdn.redhat.com/content/e4s/rhel9/9.8/andcdn.redhat.com/content/eus/rhel9/9.8/)/tmp/key/rh-cdn.pem)Repositories Affected:
Five core RHEL 9.8 repositories are migrated:
rhel-9-baseos,rhel-9-appstream,rhel-9-nfv,rhel-9-highavailability, andrhel-9-codeready-builder. Other repositories likerhel-9-server-ose-rpms(continues using mirror2 reposync),rhel-9-fast-datapath(already on CDN), andrhel-9.8-early-kernel(uses OSE plashet repo) remain unchanged.Expected Benefits:
This eliminates sync lag, prevents package version mismatches and 404 errors in CI, and simplifies the infrastructure by removing dependency on the disabled reposync service.