From 15e4e1109795a6cbe0255bbaa9200432a9f6cb6b Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Sun, 10 Mar 2024 19:01:14 +1100
Subject: [PATCH] feat: require vaultca for all yumrepos

---
 site/profiles/manifests/base.pp     | 5 ++++-
 site/profiles/manifests/defaults.pp | 4 ++++
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/site/profiles/manifests/base.pp b/site/profiles/manifests/base.pp
index d098b7b..647b5ea 100644
--- a/site/profiles/manifests/base.pp
+++ b/site/profiles/manifests/base.pp
@@ -3,6 +3,10 @@ class profiles::base (
   Array  $puppet_servers,
 ) {
 
+  # install the vault ca first
+  include profiles::pki::vaultca
+
+  # manage package repositories
   case $facts['os']['family'] {
     'RedHat': {
       include profiles::yum::global
@@ -34,7 +38,6 @@ class profiles::base (
   include profiles::ntp::client
   include profiles::dns::base
   include profiles::pki::vault
-  include profiles::pki::vaultca
   include profiles::cloudinit::init
   include profiles::metrics::default
   include profiles::helpers::node_lookup
diff --git a/site/profiles/manifests/defaults.pp b/site/profiles/manifests/defaults.pp
index 5c72fb6..1db27c8 100644
--- a/site/profiles/manifests/defaults.pp
+++ b/site/profiles/manifests/defaults.pp
@@ -27,4 +27,8 @@ class profiles::defaults {
     ensure => present,
     shell => '/bin/bash',
   }
+
+  Yumrepo {
+    require => Class['profiles::pki::vaultca'],
+  }
 }