feat: add crypto_policies

- ensure DEFAULT is used for EL8 - ensure DEFAULT:SHA1 is used for EL9, until issues with crypto are resolved for EL9
2024-12-08 19:45:42 +11:00
parent 90bcdd1f51
commit f00b867ddf
4 changed files with 6 additions and 0 deletions
@@ -1,4 +1,6 @@
 # hieradata/os/AlmaLinux/AlmaLinux8.yaml
 ---
+crypto_policies::policy: 'DEFAULT:SHA1'
+
 profiles::packages::include:
  network-scripts: {}
@@ -1,2 +1,4 @@
 # hieradata/os/AlmaLinux/AlmaLinux9.yaml
 ---
+
+crypto_policies::policy: 'DEFAULT:SHA1'
@@ -7,6 +7,7 @@ profiles::puppet::agent::puppet_version: '7.34.0'

 hiera_include:
  - profiles::almalinux::base
+  - crypto_policies

 profiles::packages::include:
  lzo: {}