# Concelier Red Hat OVAL/CSAF Connector - Operations Runbook

_Last updated: 2026-01-16_

## 1. Overview
The Red Hat connector ingests Red Hat OVAL/CSAF advisories and maps them to RHEL package versions.

## 2. Authentication
- No authentication required for public feeds.

## 3. Configuration (`concelier.yaml`)
```yaml
concelier:
  sources:
    redhat:
      baseUri: "<redhat-csaf-base>"
      maxDocumentsPerFetch: 20
      fetchTimeout: "00:00:45"
      requestDelay: "00:00:00"
```

## 4. Offline and air-gapped deployments
- Mirror the CSAF feeds into the Offline Kit and repoint `baseUri` to the mirror.

## 5. Common failure modes
- Upstream CSAF schema changes.
- Missing mappings for EUS or archived releases.