Merge pull request 'feat: require vaultca for all yumrepos' (#136) from neoloc/vaultca_cert_first into develop

Reviewed-on: unkinben/puppet-prod#136
This commit is contained in:
Ben Vincent 2024-03-10 17:33:43 +09:30
commit 05ea9c45ca
2 changed files with 8 additions and 1 deletions

View File

@ -3,6 +3,10 @@ class profiles::base (
Array $puppet_servers, Array $puppet_servers,
) { ) {
# install the vault ca first
include profiles::pki::vaultca
# manage package repositories
case $facts['os']['family'] { case $facts['os']['family'] {
'RedHat': { 'RedHat': {
include profiles::yum::global include profiles::yum::global
@ -34,7 +38,6 @@ class profiles::base (
include profiles::ntp::client include profiles::ntp::client
include profiles::dns::base include profiles::dns::base
include profiles::pki::vault include profiles::pki::vault
include profiles::pki::vaultca
include profiles::cloudinit::init include profiles::cloudinit::init
include profiles::metrics::default include profiles::metrics::default
include profiles::helpers::node_lookup include profiles::helpers::node_lookup

View File

@ -27,4 +27,8 @@ class profiles::defaults {
ensure => present, ensure => present,
shell => '/bin/bash', shell => '/bin/bash',
} }
Yumrepo {
require => Class['profiles::pki::vaultca'],
}
} }