konflux: update lockfile for nrop-mg

Description:
	This lockfile update is needed to mitigate low CHI score in
nrop-mg container and updates rsync rpm with a necessary CVE fix. This
also creates redhat.repo (lockfile) and reference it in rpms.in.yaml
(pattern used in nrop operator and all other containers).

Signed-off-by: Abraham <[email protected]>

Author: abraham2512

.konflux/must-gather/redhat.repo

@@ -0,0 +1,39 @@
+#
+# Certificate-Based Repositories
+# Managed by (rhsm) subscription-manager
+#
+# *** This file is auto-generated.  Changes made here will be over-written. ***
+# *** Use "subscription-manager repo-override --help" if you wish to make changes. ***
+#
+# If this file is empty and this system is subscribed consider
+# a "yum repolist" to refresh available repos
+#
+
+[codeready-builder-for-rhel-9-$basearch-rpms]
+name = Red Hat CodeReady Linux Builder for RHEL 9 $basearch (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9.4/$basearch/codeready-builder/os
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslverify = 1
+sslcacert = /etc/rhsm/ca/redhat-uep.pem
+sslclientkey = /etc/pki/entitlement/7511773722896751421-key.pem
+sslclientcert = /etc/pki/entitlement/7511773722896751421.pem
+sslverifystatus = 1
+metadata_expire = 86400
+enabled_metadata = 1
+
+[rhel-9-for-$basearch-baseos-eus-rpms]
+name = Red Hat Enterprise Linux 9 for $basearch - BaseOS - Extended Update Support (RPMs)
+baseurl = https://cdn.redhat.com/content/eus/rhel9/9.4/$basearch/baseos/os
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslverify = 1
+sslcacert = /etc/rhsm/ca/redhat-uep.pem
+sslclientkey = /etc/pki/entitlement/7511773722896751421-key.pem
+sslclientcert = /etc/pki/entitlement/7511773722896751421.pem
+sslverifystatus = 1
+metadata_expire = 86400
+enabled_metadata = 1
+

.konflux/must-gather/rpms.in.yaml

@@ -1,17 +1,7 @@
 contentOrigin:
   # Define at least one source of packages, but you can have as many as you want.
-  repos:
-    - repoid: rhel-9-for-$basearch-appstream-rpms
-      name: Red Hat Enterprise Linux 9 for $basearch - AppStream (RPMs)
-      baseurl: https://cdn.redhat.com/content/dist/rhel9/{version}/$basearch/appstream/os
-      gpgcheck: 1
-      gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
-      sslverify: 1
-      sslcacert: /etc/rhsm/ca/redhat-uep.pem
-      sslclientkey: /etc/pki/entitlement/739925021166662112-key.pem
-      sslclientcert: /etc/pki/entitlement/739925021166662112.pem
-      sslverifystatus: 1
-      varsFromContainerfile: must-gather.konflux.Dockerfile
+  repofiles:
+    - ./redhat.repo
 
 packages:
   # list of rpm names to resolve

.konflux/must-gather/rpms.lock.yaml

@@ -4,26 +4,19 @@ lockfileVendor: redhat
 arches:
 - arch: x86_64
   packages:
-  - url: https://cdn.redhat.com/content/dist/rhel9/9.4/x86_64/baseos/os/Packages/p/procps-ng-3.3.17-14.el9.x86_64.rpm
-    repoid: rhel-9-for-x86_64-baseos-rpms
+  - url: https://cdn.redhat.com/content/eus/rhel9/9.4/x86_64/baseos/os/Packages/p/procps-ng-3.3.17-14.el9.x86_64.rpm
+    repoid: rhel-9-for-x86_64-baseos-eus-rpms
     size: 361526
     checksum: sha256:506ad778f63821e8d9647ca8e0a3ff21b8af9c1666060d5200f9b26ee718333c
     name: procps-ng
     evr: 3.3.17-14.el9
     sourcerpm: procps-ng-3.3.17-14.el9.src.rpm
-  - url: https://cdn.redhat.com/content/dist/rhel9/9.4/x86_64/baseos/os/Packages/r/rsync-3.2.3-19.el9.x86_64.rpm
-    repoid: rhel-9-for-x86_64-baseos-rpms
-    size: 411313
-    checksum: sha256:ee29f2138b7f732ba3e552281c4bdf56c71112a17c19dd941135aa56c22cb2c8
+  - url: https://cdn.redhat.com/content/eus/rhel9/9.4/x86_64/baseos/os/Packages/r/rsync-3.2.3-19.el9_4.1.x86_64.rpm
+    repoid: rhel-9-for-x86_64-baseos-eus-rpms
+    size: 409798
+    checksum: sha256:9202697f872c6bce4e3be7ed61eaa15fc48bf76673ce8f3a48fe94c414a5f783
     name: rsync
-    evr: 3.2.3-19.el9
-    sourcerpm: rsync-3.2.3-19.el9.src.rpm
-  - url: https://cdn.redhat.com/content/dist/rhel9/9.4/x86_64/baseos/os/Packages/t/tar-1.34-6.el9_4.1.x86_64.rpm
-    repoid: rhel-9-for-x86_64-baseos-rpms
-    size: 910343
-    checksum: sha256:76f2f5fd1f37153d51a697659db31bd2a672a1a4536b42ce020cf9602ea3cde7
-    name: tar
-    evr: 2:1.34-6.el9_4.1
-    sourcerpm: tar-1.34-6.el9_4.1.src.rpm
+    evr: 3.2.3-19.el9_4.1
+    sourcerpm: rsync-3.2.3-19.el9_4.1.src.rpm
   source: []
   module_metadata: []