feat: add crypto_policies (#192)

- ensure DEFAULT is used for EL8 - ensure DEFAULT:SHA1 is used for EL9, until issues with crypto are resolved for EL9 Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/192
2024-12-08 19:47:59 +11:00
parent b244327c34
commit dbccaea24b
4 changed files with 5 additions and 0 deletions
@@ -1,5 +1,7 @@
 # hieradata/os/AlmaLinux/AlmaLinux8.yaml
 ---
+crypto_policies::policy: 'DEFAULT:SHA1'
+
 profiles::packages::include:
  network-scripts: {}

@@ -1,5 +1,6 @@
 # hieradata/os/AlmaLinux/AlmaLinux9.yaml
 ---
+crypto_policies::policy: 'DEFAULT:SHA1'

 profiles::yum::global::repos:
  crb:
@@ -7,6 +7,7 @@ profiles::puppet::agent::puppet_version: '7.34.0'

 hiera_include:
  - profiles::almalinux::base
+  - crypto_policies

 profiles::packages::include:
  lzo: {}