# Concelier SUSE OVAL/CSAF Connector - Operations Runbook

_Last updated: 2026-01-16_

## 1. Overview
The SUSE connector ingests SUSE OVAL/CSAF advisories and maps them to SUSE package versions.

## 2. Authentication
- No authentication required for public feeds.

## 3. Configuration (`concelier.yaml`)
```yaml
concelier:
  sources:
    suse:
      baseUri: "<suse-csaf-base>"
      maxDocumentsPerFetch: 20
      fetchTimeout: "00:00:45"
      requestDelay: "00:00:00"
```

## 4. Offline and air-gapped deployments
- Mirror the CSAF feeds into the Offline Kit and repoint `baseUri` to the mirror.

## 5. Common failure modes
- Upstream CSAF schema changes.
- Missing mappings for legacy maintenance releases.