Skip to content

ART-14263: Migrate OCP 5.0 RPM repos to R2 CloudFlare #79886

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
openshift-merge-bot merged 1 commit into from
May 30, 2026
Merged

ART-14263: Migrate OCP 5.0 RPM repos to R2 CloudFlare #79886

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion core-services/release-controller/_repos/ocp-5.0-default.repo
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release ht

[rhel-server-ose]
name = rhel-server-ose
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0/rhel-server-ose-rpms/
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0/rhel-server-ose-rpms/
sslverify = false
username_file = /tmp/mirror-enterprise-basic-auth/username
password_file = /tmp/mirror-enterprise-basic-auth/password
Expand Down
2 changes: 1 addition & 1 deletion core-services/release-controller/_repos/ocp-5.0-openstack-beta.repo
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
[openstack-beta-rhel8]
name = rhel-openstack
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0/openstack-beta-for-rhel-8-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0/openstack-beta-for-rhel-8-rpms
sslverify = false
username_file = /tmp/mirror-enterprise-basic-auth/username
password_file = /tmp/mirror-enterprise-basic-auth/password
Expand Down
2 changes: 1 addition & 1 deletion core-services/release-controller/_repos/ocp-5.0-ppc64le.repo
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release ht

[rhel-server-ose]
name = rhel-server-ose
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0_ppc64le/rhel-server-ose-rpms/
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0_ppc64le/rhel-server-ose-rpms/
sslverify = false
username_file = /tmp/mirror-enterprise-basic-auth/username
password_file = /tmp/mirror-enterprise-basic-auth/password
Expand Down
2 changes: 1 addition & 1 deletion core-services/release-controller/_repos/ocp-5.0-rhel-8-ironic-prevalidation.repo
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
[rhel-8-ironic-prevalidation]
name = rhel-8-ironic-prevalidation
baseurl = https://mirror2.openshift.com/enterprise/reposync/ci-ironic/rhaos-5.0-rhel-8-ironic-prevalidation/x86_64/os/
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/ci-ironic/rhaos-5.0-rhel-8-ironic-prevalidation/x86_64/os/
enabled = 0
sslverify = false
username_file = /tmp/mirror-enterprise-basic-auth/username
Expand Down
2 changes: 1 addition & 1 deletion core-services/release-controller/_repos/ocp-5.0-rhel-8-server-ironic.repo
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
[rhel-8-server-ironic-rpms]
name = rhel-8-server-ironic-rpms
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0/rhel-8-server-ironic-rpms/
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0/rhel-8-server-ironic-rpms/
enabled = 1
sslverify = false
username_file = /tmp/mirror-enterprise-basic-auth/username
Expand Down
2 changes: 1 addition & 1 deletion core-services/release-controller/_repos/ocp-5.0-rhel-9-ironic-prevalidation.repo
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
[rhel-9-ironic-prevalidation]
name = rhel-9-ironic-prevalidation
baseurl = https://mirror2.openshift.com/enterprise/reposync/ci-ironic/rhaos-5.0-ironic-rhel-9-prevalidation/x86_64/os/
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/ci-ironic/rhaos-5.0-ironic-rhel-9-prevalidation/x86_64/os/
enabled = 0
sslverify = false
username_file = /tmp/mirror-enterprise-basic-auth/username
Expand Down
2 changes: 1 addition & 1 deletion core-services/release-controller/_repos/ocp-5.0-rhel-9-server-ironic.repo
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
[rhel-9-server-ironic-rpms]
name = rhel-9-server-ironic-rpms
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0/rhel-9-server-ironic-rpms/
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0/rhel-9-server-ironic-rpms/
enabled = 1
sslverify = false
username_file = /tmp/mirror-enterprise-basic-auth/username
Expand Down
12 changes: 6 additions & 6 deletions core-services/release-controller/_repos/ocp-5.0-rhel10.repo
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
[rhel-10-baseos]
name = rhel-10-baseos
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0/rhel-10-baseos
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0/rhel-10-baseos

@coderabbitai coderabbitai Bot May 30, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

# 1) Inspect the target .repo file (line-numbered)
file="core-services/release-controller/_repos/ocp-5.0-rhel10.repo"
echo "== File exists? =="
ls -l "$file" || true
echo
echo "== Contents (numbered) =="
nl -ba "$file" | sed -n '1,140p'

# 2) Find all occurrences of "/test-repo-files" in the repo (docs/scripts/CI)
echo
echo "== Search for /test-repo-files command reference =="
rg -n --hidden --no-ignore-vcs "/test-repo-files" . || true

# 3) Search for "test-repo-files" (without slash), in case command is defined as a script/target
echo
echo "== Search for test-repo-files implementation =="
rg -n --hidden --no-ignore-vcs "test-repo-files" . || true

# 4) Search for helper scripts that validate repo files (keywords)
echo
echo "== Search for repo file validation helpers =="
rg -n --hidden --no-ignore-vcs "repo[-_ ]files|repos?\s*ync|mirror2|CDN|baseurl" core-services/release-controller . || true

Repository: openshift/release

Length of output: 278

🏁 Script executed:

#!/bin/bash
set -euo pipefail

file="core-services/release-controller/_repos/ocp-5.0-rhel10.repo"

echo "== Contents of $file (numbered, first 120 lines) =="
# cat -n is available; nl is not
cat -n "$file" | sed -n '1,120p'

echo
echo "== Search for reference to /test-repo-files (docs/scripts/CI) =="
rg -n --hidden --no-ignore-vcs "/test-repo-files" . || true

echo
echo "== Search for reference to test-repo-files (alternative spelling/without slash) =="
rg -n --hidden --no-ignore-vcs "test-repo-files" . || true

echo
echo "== Search for repo file validation helpers related to this guideline =="
rg -n --hidden --no-ignore-vcs "mirror2|CDN|openshift-mirror-list|reposync|baseurl" core-services/release-controller/_repos . || true

Repository: openshift/release

Length of output: 50374

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "== Show .claude/commands/test-repo-files.md (first 200 lines) =="
sed -n '1,200p' ./.claude/commands/test-repo-files.md || true

echo
echo "== Show relevant section from .claude/SLASH_COMMANDS.md about /test-repo-files (around first match) =="
line=$(rg -n "### `/test-repo-files`" .claude/SLASH_COMMANDS.md | cut -d: -f1 | head -n1 || true)
if [ -n "${line:-}" ]; then
  start=$((line-20))
  end=$((line+80))
  sed -n "${start},${end}p" .claude/SLASH_COMMANDS.md
else
  echo "No match found in .claude/SLASH_COMMANDS.md"
fi

echo
echo "== Search for implementation/runner of test-repo-files (outside docs) =="
rg -n --hidden --no-ignore-vcs "test-repo-files" \
  --glob '!**/.claude/**' \
  --glob '!**/CLAUDE.md' \
  --glob '!**/*.md' . || true

echo
echo "== Search for any recorded output mentioning ocp-5.0-rhel10 and/or test-repo-files =="
rg -n --hidden --no-ignore-vcs "ocp-5\.0-rhel10|test-repo-files" . || true

Repository: openshift/release

Length of output: 6206

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "== Inspect .claude/commands/test-repo-files.md for URL matching logic =="
rg -n "mirror2\.openshift\.com|cdn\.redhat\.com|openshift-mirror-list" .claude/commands/test-repo-files.md || true
echo
sed -n '1,220p' ./.claude/commands/test-repo-files.md

echo
echo "== Locate /test-repo-files section in .claude/SLASH_COMMANDS.md (safe quoting) =="
match_line=$(rg -n --fixed-string "### \`/test-repo-files\`" .claude/SLASH_COMMANDS.md | head -n1 || true)
if [ -z "${match_line}" ]; then
  match_line=$(rg -n --fixed-string "/test-repo-files" .claude/SLASH_COMMANDS.md | head -n1 || true)
fi
echo "match_line: ${match_line:-<none>}"
if [ -n "${match_line}" ]; then
  line_no=$(echo "$match_line" | cut -d: -f1)
  start=$((line_no-25))
  end=$((line_no+80))
  sed -n "${start},${end}p" .claude/SLASH_COMMANDS.md
fi

Repository: openshift/release

Length of output: 5758

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "== Find /test-repo-files entries in .claude/SLASH_COMMANDS.md (line numbers) =="
rg -n --no-heading --no-messages --fixed-strings "/test-repo-files" .claude/SLASH_COMMANDS.md | head -n 20 || true
echo

echo "== Print ~120 lines around the first /test-repo-files occurrence (if any) =="
line=$(rg -n --no-heading --no-messages --fixed-strings "/test-repo-files" .claude/SLASH_COMMANDS.md | head -n1 | cut -d: -f1 || true)
if [ -n "${line:-}" ]; then
  start=$((line-60))
  if [ "$start" -lt 1 ]; then start=1; fi
  end=$((line+60))
  sed -n "${start},${end}p" .claude/SLASH_COMMANDS.md
else
  echo "No /test-repo-files occurrence found in .claude/SLASH_COMMANDS.md"
fi
echo

echo "== Search for any recorded /test-repo-files output mentioning ocp-5.0-rhel10 =="
rg -n --hidden --no-ignore-vcs --fixed-strings "ocp-5.0-rhel10" . || true
echo

echo "== Search for recorded validation output markers =="
rg -n --hidden --no-ignore-vcs "mirror2 paths:|CDN paths:|dnf wrapper:" . || true

Repository: openshift/release

Length of output: 5526

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "== Search for openshift-mirror-list in /test-repo-files docs =="
rg -n --fixed-strings "openshift-mirror-list.ci-systems.workers.dev" .claude/commands/test-repo-files.md .claude/SLASH_COMMANDS.md .claude/commands/README.md || true

echo
echo "== Search for 'mirror2.openshift.com' handling =="
rg -n --fixed-strings "mirror2.openshift.com" .claude/commands/test-repo-files.md .claude/SLASH_COMMANDS.md .claude/commands/README.md || true

echo
echo "== List .claude/commands directory to find any implementation =="
ls -la .claude/commands || true

echo
echo "== Search repository for any script/code that implements test-repo-files =="
rg -n --hidden --no-ignore-vcs "test-repo-files" . --glob '!**/.git/**' --glob '!**/*.md' || true

echo
echo "== Search for any executable named test-repo-files =="
fd -H "test-repo-files" . || true

Repository: openshift/release

Length of output: 2176

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "== Search for validation output lines that include ocp-5.0-rhel10 =="
rg -n --hidden --no-ignore-vcs --fixed-strings "ocp-5.0-rhel10" . || true

echo
echo "== Search for mirror2/CDN/dnf wrapper summary blocks mentioning ocp-5.0-rhel10 =="
rg -n --hidden --no-ignore-vcs -S "mirror2 paths:|CDN paths:|dnf wrapper:" . || true

echo
echo "== Search for any mention of '/test-repo-files' with ocp-5.0-rhel10 =="
rg -n --hidden --no-ignore-vcs -S "/test-repo-files.*ocp-5\.0-rhel10|ocp-5\.0-rhel10.*test-repo-files" . || true

echo
echo "== Search for any mention of 'ocp-5.0-rhel10.repo' specifically =="
rg -n --hidden --no-ignore-vcs --fixed-strings "ocp-5.0-rhel10.repo" . || true

Repository: openshift/release

Length of output: 2777

Add /test-repo-files validation output for core-services/release-controller/_repos/ocp-5.0-rhel10.repo
PR feedback is missing the required /test-repo-files run results for the updated baseurl entries in this file (lines 3, 15, 39, 51, 63, 77). Add the passing output for:
/test-repo-files ocp-5.0-rhel10

🤖 Prompt for AI Agents 
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@core-services/release-controller/_repos/ocp-5.0-rhel10.repo` at line 3, The
PR is missing the required `/test-repo-files` validation output for the updated
baseurl entries in the ocp-5.0-rhel10 repo; run the validator and add the
passing output for `/test-repo-files ocp-5.0-rhel10`, ensuring the results cover
the baseurl lines referenced (the repo id ocp-5.0-rhel10 and the baseurl entries
on lines with the rhel-10-baseos, rhel-10-appstream, rhel-10-highavailability,
rhel-10-resilientstorage, rhel-10-supplementary and rhel-10-rt entries), then
commit the test output to the PR so the reviewer can verify the validation
passed.

enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand All @@ -12,7 +12,7 @@ skip_if_unavailable = true

[rhel-10-appstream]
name = rhel-10-appstream
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0/rhel-10-appstream
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0/rhel-10-appstream
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand All @@ -36,7 +36,7 @@ failovermethod = priority

[rhel-10-nfv]
name = rhel-10-nfv
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0/rhel-10-nfv
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0/rhel-10-nfv
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand All @@ -48,7 +48,7 @@ skip_if_unavailable = true

[rhel-10-highavailability]
name = rhel-10-highavailability
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0/rhel-10-highavailability
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0/rhel-10-highavailability
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand All @@ -60,7 +60,7 @@ skip_if_unavailable = true

[rhel-10-server-ose-5.0]
name = rhel-10-server-ose-5.0
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0/rhel-10-server-ose-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0/rhel-10-server-ose-rpms
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand All @@ -74,7 +74,7 @@ skip_if_unavailable = true
# See https://issues.redhat.com/browse/ART-11248.
[rhel-10-early-kernel]
name = rhel-10-early-kernel
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0/rhel-10-server-ose-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0/rhel-10-server-ose-rpms
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand Down
4 changes: 2 additions & 2 deletions core-services/release-controller/_repos/ocp-5.0-rhel102.repo
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@ failovermethod = priority

[rhel-10.2-server-ose-5.0]
name = rhel-10.2-server-ose-5.0
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0/rhel-10-server-ose-rpms/
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0/rhel-10-server-ose-rpms/

@coderabbitai coderabbitai Bot May 30, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

FILE="core-services/release-controller/_repos/ocp-5.0-rhel102.repo"

echo "== File: $FILE =="
if [ ! -f "$FILE" ]; then
  echo "Missing file: $FILE" >&2
  exit 1
fi

# Show line numbers around the reported baseurl lines
nl -ba "$FILE" | sed -n '50,95p'

# Also report any other baseurl occurrences in the file
echo
echo "== baseurl occurrences =="
rg -n "^[[:space:]]*baseurl[[:space:]]*=" "$FILE" || true

# And any mirrorlist/mirror2/cdn related URLs
echo
echo "== mirror/cdn related URL occurrences =="
rg -n "openshift-mirror-list|mirror2|cdn|content-delivery|workers\.dev" "$FILE" || true

Repository: openshift/release

Length of output: 196

🏁 Script executed:

#!/bin/bash
set -euo pipefail

FILE="core-services/release-controller/_repos/ocp-5.0-rhel102.repo"

echo "== File: $FILE =="
[ -f "$FILE" ] || { echo "Missing file: $FILE" >&2; exit 1; }

echo
echo "== Lines 55-90 (context) =="
awk 'NR>=55 && NR<=90 {printf "%d\t%s\n", NR, $0}' "$FILE"

echo
echo "== baseurl occurrences =="
rg -n '^[[:space:]]*baseurl[[:space:]]*=' "$FILE" || true

echo
echo "== mirror/cdn related URL occurrences =="
rg -n 'openshift-mirror-list|mirror2|cdn|content-delivery|workers\.dev' "$FILE" || true

Repository: openshift/release

Length of output: 3680

Missing mandatory /test-repo-files validation for ocp-5.0-rhel102.repo mirror URL edits
baseurl was updated to https://openshift-mirror-list.ci-systems.workers.dev/... at:

  • line 66: /enterprise/reposync/5.0/rhel-10-server-ose-rpms/
  • line 78: /enterprise/reposync/5.0/rhel-102-early-kernel/

Provide the /test-repo-files validation output for these ocp-*.repo URL changes.

🤖 Prompt for AI Agents 
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@core-services/release-controller/_repos/ocp-5.0-rhel102.repo` at line 66, The
PR updated baseurl entries in ocp-5.0-rhel102.repo (the two URLs containing
/enterprise/reposync/5.0/rhel-10-server-ose-rpms/ and
/enterprise/reposync/5.0/rhel-102-early-kernel/) but did not include the
required /test-repo-files validation output; run the test-repo-files tool
against those exact mirror URLs (the baseurl values changed in
ocp-5.0-rhel102.repo), capture the full validation output (success/failure and
any missing files), and attach that output to the PR or add it to the commit so
reviewers can verify the mirror edits.

enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand All @@ -75,7 +75,7 @@ skip_if_unavailable = true

[rhel-10.2-early-kernel]
name = rhel-10.2-early-kernel
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0/rhel-102-early-kernel/
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0/rhel-102-early-kernel/
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand Down
2 changes: 1 addition & 1 deletion core-services/release-controller/_repos/ocp-5.0-rhel8-aarch64.repo
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ failovermethod = priority
name = rhel-8-server-ose
# Using mirror until aarch64 content released to CDN
# See: https://github.com/openshift/release/pull/23111#discussion_r739417374
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0_aarch64/rhel-8-server-ose-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0_aarch64/rhel-8-server-ose-rpms

@coderabbitai coderabbitai Bot May 30, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

# Show the relevant file and the exact line with baseurl (and nearby fields)
FILE="core-services/release-controller/_repos/ocp-5.0-rhel8-aarch64.repo"
echo "== $FILE =="
if [ -f "$FILE" ]; then
  nl -ba "$FILE" | sed -n '1,120p'
else
  echo "MISSING: $FILE"
fi

# Search for other ocp repo files to compare URL patterns
echo
echo "== Compare baseurl patterns across core-services/release-controller/_repos/ocp-*.repo =="
fd -a "ocp-*.repo" core-services/release-controller/_repos | sort | wc -l
fd -a "ocp-*.repo" core-services/release-controller/_repos | sort | while read -r f; do
  echo "--- $f"
  rg -n "^(baseurl|mirrorlist|#|metalink|gpgkey|enabled|repo(batch)?|name)\b" "$f" | head -n 30 || true
  # Show only the baseurl line(s)
  rg -n "^baseurl\s*=" "$f" || true
done

# Look for documentation of the /test-repo-files slash command
echo
echo "== Search for /test-repo-files guidance =="
rg -n "/test-repo-files" -S . || true

# Look for other mentions of mirror2 / CDN URL expectations (if present)
echo
echo "== Search for mirror2 / CDN URL wording =="
rg -n "mirror2|CDN|cdn\.|openshift-mirror-list" -S core-services/release-controller/_repos || true

Repository: openshift/release

Length of output: 195

🏁 Script executed:

#!/bin/bash
set -euo pipefail

FILE="core-services/release-controller/_repos/ocp-5.0-rhel8-aarch64.repo"
echo "== Show $FILE and baseurl line =="
if [ -f "$FILE" ]; then
  echo "--- baseurl line(s) ---"
  rg -n "^baseurl\s*=" "$FILE" || true
  echo "--- line 41 (context) ---"
  awk 'NR>=35 && NR<=47 {printf "%5d:%s\n", NR, $0}' "$FILE" || true
else
  echo "MISSING: $FILE"
fi

echo
echo "== Compare baseurl patterns across core-services/release-controller/_repos/ocp-*.repo =="
if command -v fd >/dev/null 2>&1; then
  mapfile -t files < <(fd -a "ocp-*.repo" core-services/release-controller/_repos | sort)
else
  mapfile -t files < <(find core-services/release-controller/_repos -maxdepth 1 -type f -name "ocp-*.repo" | sort)
fi

echo "Found: ${`#files`[@]} ocp-*.repo files"
for f in "${files[@]}"; do
  echo
  echo "--- $f ---"
  rg -n "^baseurl\s*=" "$f" || true
done

echo
echo "== Search for /test-repo-files guidance =="
rg -n "/test-repo-files" -S . || true

echo
echo "== Search for mirror2 / CDN / openshift-mirror-list wording =="
rg -n "mirror2|CDN|cdn\.|openshift-mirror-list" -S core-services/release-controller/_repos || true

Repository: openshift/release

Length of output: 1707

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "== List ocp-*.repo files and show baseurl lines =="
for f in $(find core-services/release-controller/_repos -maxdepth 1 -type f -name 'ocp-*.repo' | sort); do
  echo
  echo "--- $f ---"
  awk -F= '/^baseurl[[:space:]]*=/{gsub(/[[:space:]]+$/,"",$2); print "baseurl = "$2}' "$f"
done

echo
echo "== Search for /test-repo-files guidance =="
rg -n "/test-repo-files" -S . || true

echo
echo "== Search for openshift-mirror-list / mirror2 / CDN wording =="
rg -n "openshift-mirror-list|mirror2|CDN|cdn\.redhat\.com" -S core-services/release-controller/_repos || true

Repository: openshift/release

Length of output: 50374

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "== Search for test-repo-files guidance =="
rg -n "test-repo-files" -S . --hidden --glob '!.git/*' || true
rg -n "/test-repo-files" -S . --hidden --glob '!.git/*' || true

echo
echo "== Search for repo-file validation mention (broader) =="
rg -n "repo[- ]file|repo file|mirror.*CDN|openshift-mirror-list" -S . --hidden --glob '!.git/*' | head -n 50 || true

Repository: openshift/release

Length of output: 10956

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "== CLAUDE.md /test-repo-files section =="
awk 'NR>=30 && NR<=70 {print}' CLAUDE.md

echo
echo "== .claude/commands/test-repo-files.md =="
awk 'NR>=1 && NR<=120 {print}' .claude/commands/test-repo-files.md

echo
echo "== .claude/SLASH_COMMANDS.md /test-repo-files =="
awk 'NR>=360 && NR<=430 {print}' .claude/SLASH_COMMANDS.md

echo
echo "== .claude/commands/README.md /test-repo-files =="
awk 'NR>=610 && NR<=675 {print}' .claude/commands/README.md

Repository: openshift/release

Length of output: 10053

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "== Find implementation references for test-repo-files =="
rg -n "test-repo-files" -S . --hidden --glob '!.git/*' | head -n 80

echo
echo "== Search for openshift-mirror-list usage in test-repo-files code =="
rg -n "openshift-mirror-list\.ci-systems\.workers\.dev|mirror2\.openshift\.com|cdn\.redhat\.com|rhsm-pulp\.corp\.redhat\.com" -S . --hidden --glob '!.git/*' | head -n 80

echo
echo "== Search for mirror2 host list inside any scripts =="
rg -n "mirror2\.openshift\.com" -S . --hidden --glob '!.git/*' | head -n 80

Repository: openshift/release

Length of output: 27409

Run /test-repo-files for the updated repo file before merge
core-services/release-controller/_repos/ocp-5.0-rhel8-aarch64.repo (baseurl line 41) was changed to https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0_aarch64/rhel-8-server-ose-rpms; execute /test-repo-files ocp-5.0-rhel8-aarch64 and post the mirror2/CDN validation results in the PR.

🤖 Prompt for AI Agents 
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@core-services/release-controller/_repos/ocp-5.0-rhel8-aarch64.repo` at line
41, The repo file
core-services/release-controller/_repos/ocp-5.0-rhel8-aarch64.repo was updated
(baseurl set to
https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0_aarch64/rhel-8-server-ose-rpms);
run the repository validation job by executing "/test-repo-files
ocp-5.0-rhel8-aarch64", capture the mirror2 and CDN validation output, and post
those validation results in the PR so reviewers can confirm the updated baseurl
passes CI checks.

gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
gpgcheck = 0
Expand Down
8 changes: 4 additions & 4 deletions core-services/release-controller/_repos/ocp-5.0-rhel8.repo
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@ failovermethod = priority

[rhel-8-server-ose]
name = rhel-8-server-ose
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0/rhel-8-server-ose-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0/rhel-8-server-ose-rpms
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand Down Expand Up @@ -144,7 +144,7 @@ failovermethod = priority

[rhel-8-server-ose-ppc64le]
name = rhel-8-server-ose-ppc64le
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0_ppc64le/rhel-8-server-ose-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0_ppc64le/rhel-8-server-ose-rpms
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand Down Expand Up @@ -240,7 +240,7 @@ failovermethod = priority

[rhel-8-server-ose-s390x]
name = rhel-8-server-ose-s390x
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0_s390x/rhel-8-server-ose-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0_s390x/rhel-8-server-ose-rpms
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand Down Expand Up @@ -324,7 +324,7 @@ failovermethod = priority

[rhel-8-server-ose-aarch64]
name = rhel-8-server-ose-aarch64
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0_aarch64/rhel-8-server-ose-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0_aarch64/rhel-8-server-ose-rpms
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand Down
2 changes: 1 addition & 1 deletion core-services/release-controller/_repos/ocp-5.0-rhel86.repo
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@ failovermethod = priority

[rhel-8.6-server-ose-5.0]
name = rhel-8.6-server-ose-5.0
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0/rhel-8-server-ose-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0/rhel-8-server-ose-rpms
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand Down
10 changes: 5 additions & 5 deletions core-services/release-controller/_repos/ocp-5.0-rhel9.repo
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -72,7 +72,7 @@ skip_if_unavailable = true

[rhel-9-server-ose]
name = rhel-9-server-ose
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0/rhel-9-server-ose-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0/rhel-9-server-ose-rpms
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand All @@ -91,7 +91,7 @@ skip_if_unavailable = true
# interested in.
[rhel-9.8-early-kernel]
name = rhel-9.8-early-kernel
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0/rhel-9-server-ose-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0/rhel-9-server-ose-rpms
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand Down Expand Up @@ -143,7 +143,7 @@ failovermethod = priority

[rhel-9-server-ose-ppc64le]
name = rhel-9-server-ose-ppc64le
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0_ppc64le/rhel-9-server-ose-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0_ppc64le/rhel-9-server-ose-rpms
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand Down Expand Up @@ -202,7 +202,7 @@ failovermethod = priority

[rhel-9-server-ose-s390x]
name = rhel-9-server-ose-s390x
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0_s390x/rhel-9-server-ose-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0_s390x/rhel-9-server-ose-rpms
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand Down Expand Up @@ -261,7 +261,7 @@ failovermethod = priority

[rhel-9-server-ose-aarch64]
name = rhel-9-server-ose-aarch64
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0_aarch64/rhel-9-server-ose-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0_aarch64/rhel-9-server-ose-rpms
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand Down
2 changes: 1 addition & 1 deletion core-services/release-controller/_repos/ocp-5.0-rhel92.repo
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@ failovermethod = priority

[rhel-9.2-server-ose-5.0]
name = rhel-9.2-server-ose-5.0
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0/rhel-9-server-ose-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0/rhel-9-server-ose-rpms
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand Down
2 changes: 1 addition & 1 deletion core-services/release-controller/_repos/ocp-5.0-rhel94.repo
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@ failovermethod = priority

[rhel-9.4-server-ose-5.0]
name = rhel-9.4-server-ose-5.0
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0/rhel-9-server-ose-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0/rhel-9-server-ose-rpms
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand Down
10 changes: 5 additions & 5 deletions core-services/release-controller/_repos/ocp-5.0-rhel96.repo
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -67,7 +67,7 @@ failovermethod = priority

[rhel-9.6-server-ose-5.0]
name = rhel-9.6-server-ose-5.0
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0/rhel-9-server-ose-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0/rhel-9-server-ose-rpms
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand All @@ -81,7 +81,7 @@ skip_if_unavailable = true
# See https://issues.redhat.com/browse/ART-11248.
[rhel-9.6-early-kernel]
name = rhel-9.6-early-kernel
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0/rhel-9-server-ose-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0/rhel-9-server-ose-rpms
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand Down Expand Up @@ -130,7 +130,7 @@ failovermethod = priority

[rhel-9.6-server-ose-5.0-ppc64le]
name = rhel-9.6-server-ose-5.0-ppc64le
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0_ppc64le/rhel-9-server-ose-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0_ppc64le/rhel-9-server-ose-rpms
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand Down Expand Up @@ -186,7 +186,7 @@ failovermethod = priority

[rhel-9.6-server-ose-5.0-s390x]
name = rhel-9.6-server-ose-5.0-s390x
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0_s390x/rhel-9-server-ose-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0_s390x/rhel-9-server-ose-rpms
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand Down Expand Up @@ -242,7 +242,7 @@ failovermethod = priority

[rhel-9.6-server-ose-5.0-aarch64]
name = rhel-9.6-server-ose-5.0-aarch64
baseurl = https://mirror2.openshift.com/enterprise/reposync/5.0_aarch64/rhel-9-server-ose-rpms
baseurl = https://openshift-mirror-list.ci-systems.workers.dev/enterprise/reposync/5.0_aarch64/rhel-9-server-ose-rpms
enabled = 1
gpgkey = https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-release https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-beta https://mirror.ops.rhcloud.com/libra/keys/RPM-GPG-KEY-redhat-openshifthosted
sslverify = false
Expand Down
Loading