CMP-3756: Configure MintMaker updates on RPM lockfiles by yuumasato · Pull Request #14041 · ComplianceAsCode/content
Copy link
Member
yuumasato
commented
Oct 24, 2025
yuumasato
commented
Description:
- Add a repo file so that
rpms.lock.filecan be properly maintained.
Rationale:
-
MintMaker requires a repo file to keep rpms.lock.yaml up to date.
The repo file is also configured with SSL variables so that RPMs behind a subscription are accessible. -
Fixes CMP-3756
Review Hints:
- https://konflux.pages.redhat.com/docs/users/mintmaker/rpm-lockfile.html#rpm-lockfile-with-rpms-that-require-subscription
- https://konflux.pages.redhat.com/docs/users/building/activation-keys-subscription.html#configuring-an-rpm-lockfile-for-hermetic-builds
- If nothing seems utterly wrong, we kinda need to merge and wait to see if MintMaker proposes a PR, 😅
yuumasato
added this to the
0.1.79 milestone
yuumasato
assigned
Vincent056 and
rhmdnd
Vincent056 approved these changes Oct 24, 2025
Copy link
Contributor
Vincent056
left a comment
Vincent056
left a comment
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/lgtm
rhmdnd approved these changes Oct 24, 2025
Copy link
Collaborator
rhmdnd
left a comment
rhmdnd
left a comment
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/lgtm
Copy link
Member Author
yuumasato
commented
Oct 27, 2025
yuumasato commented
Oct 27, 2025/retest
jan-cerny
modified the milestones:
0.1.79,
0.1.80
yuumasato added 2 commits
December 4, 2025 16:08MintMaker requires a repo file to keep rpms.lock.yaml up to date. The repo file is also configured with SSL variables so that RPMs behind a subscription are accessible.
Relative paths work well for 'rpms.in.yaml`.
yuumasato
force-pushed
the
configure-mintmaker-rpm-lockfile-update
branch
from
e9b9632 to
4dc6f10
Compare
Copy link
openshift-ci
bot
commented
Dec 4, 2025
openshift-ci bot commented
Dec 4, 2025@yuumasato: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:
| Test name | Commit | Details | Required | Rerun command |
|---|---|---|---|---|
| ci/prow/e2e-aws-openshift-node-compliance | 4dc6f10 | link | true | /test e2e-aws-openshift-node-compliance |
Full PR test history. Your PR dashboard.
Details
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.
ggbecker
modified the milestones:
0.1.80,
0.1.81
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters