Bug 1885419

Description of problem:
This operator builds and installs an unsigned RPM as part of the image build. This causes erratatool to block the errata if it is attached. Since this is part of the payload, we can't simply drop it from the release (... unless there is no functional reference to it in core OCP).

Version-Release number of selected component (if applicable):
cluster-node-tuning-operator-container-v4.6.0-202010030042.p0
(https://brewweb.engineering.redhat.com/brew/buildinfo?buildID=1339925)

How reproducible:
Build in OSBS. Attach build to advisory, or just look at logs:
http://download.eng.bos.redhat.com/brewroot/packages/cluster-node-tuning-operator-container/v4.6.0/202010030042.p0/data/logs/x86_64-build.log

Actual results:
rpmbuild [...] -tb tuned-2.14.0.tar.gz
====================================================================================================

 Package                           Arch    Version               Repository                     Size

====================================================================================================

Installing:

 tuned                             noarch  2.14.0-1.el8          @commandline                  295 k

 tuned-profiles-atomic             noarch  2.14.0-1.el8          @commandline                   33 k

 tuned-profiles-cpu-partitioning   noarch  2.14.0-1.el8          @commandline                   36 k

 tuned-profiles-mssql              noarch  2.14.0-1.el8          @commandline                   32 k

 tuned-profiles-nfv                noarch  2.14.0-1.el8          @commandline                   31 k

 tuned-profiles-nfv-guest          noarch  2.14.0-1.el8          @commandline                   33 k

 tuned-profiles-nfv-host           noarch  2.14.0-1.el8          @commandline                   34 k

 tuned-profiles-oracle             noarch  2.14.0-1.el8          @commandline                   32 k

 tuned-profiles-realtime           noarch  2.14.0-1.el8          @commandline                   34 k

 tuned-profiles-sap                noarch  2.14.0-1.el8          @commandline                   32 k

 tuned-profiles-sap-hana           noarch  2.14.0-1.el8          @commandline                   32 k

 tuned-profiles-spectrumscale      noarch  2.14.0-1.el8          @commandline                   32 k


Expected results:
All RPMs installed are built in brew and signed with RH signing key.

Additional info:
Can I suggest just... installing the content without building an RPM? In an ideal world, the RPM would be built in brew. There's also nothing wrong with building from source in a container, it's just the presence of an unsigned RPM sets off all sorts of alarms when it's time to ship. 

For the minimal change, I suppose something like this might be an acceptable way to mask this:

$ rpm -e --justdb tuned tuned-profiles-{atomic, mysql,...}