chore: centralise all yum repo configuration

- add 30+ repository definitions to AlmaLinux/all_releases.yaml with `ensure: absent` defaults
- update all role-specific hieradata files to use `ensure: present` pattern
- remove duplicated repository URL/GPG key configurations from individual roles
- maintains existing functionality while improving maintainability"

hieradata/os/AlmaLinux/all_releases.yaml

@@ -127,8 +127,8 @@ profiles::yum::global::repos:
     name: ceph
     descr: ceph repository
     target: /etc/yum.repos.d/ceph.repo
-    baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/ceph-reef/el-%{facts.os.release.major}/%{facts.os.architecture}
-    gpgkey: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/ceph-reef/el-%{facts.os.release.major}/%{facts.os.architecture}/repodata/repomd.xml.asc
+    baseurl: https://packagerepo.service.consul/ceph/reef/rhel%{facts.os.release.major}/x86_64/
+    gpgkey: https://packagerepo.service.consul/ceph/reef/rhel%{facts.os.release.major}/x86_64/repodata/repomd.xml.key
     gpgcheck: 1
     mirrorlist: absent
   ceph-noarch:
@@ -136,10 +136,19 @@ profiles::yum::global::repos:
     name: ceph-noarch
     descr: ceph noarch repository
     target: /etc/yum.repos.d/ceph.repo
-    baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/ceph-reef/el-%{facts.os.release.major}/noarch
-    gpgkey: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/ceph-reef/el-%{facts.os.release.major}/noarch/repodata/repomd.xml.asc
+    baseurl: https://packagerepo.service.consul/ceph/reef/rhel%{facts.os.release.major}/noarch/
+    gpgkey: https://packagerepo.service.consul/ceph/reef/rhel%{facts.os.release.major}/x86_64/repodata/repomd.xml.key
     gpgcheck: 1
     mirrorlist: absent
+  ceph-reef:
+    ensure: absent
+    name: ceph-reef
+    descr: ceph reef repository
+    target: /etc/yum.repos.d/ceph.repo
+    baseurl: https://packagerepo.service.consul/ceph/reef/rhel%{facts.os.release.major}/%{facts.os.architecture}/
+    gpgkey: https://packagerepo.service.consul/ceph/reef/rhel%{facts.os.release.major}/%{facts.os.architecture}/repodata/repomd.xml.key
+    gpgcheck: 0
+    mirrorlist: absent
 
   # Rancher RKE2 repositories
   rancher-rke2-common-latest:

hieradata/roles/apps/media.yaml

@@ -3,7 +3,7 @@ hiera_include:
   - profiles::nginx::simpleproxy
 
 profiles::yum::global::repos:
-  ceph:
+  ceph-reef:
     ensure: present
 
 profiles::ceph::client::keyrings:

hieradata/roles/infra/nomad/agent.yaml

@@ -24,7 +24,7 @@ frrouting::ospfd_interfaces:
     area: 0.0.0.1
 
 profiles::yum::global::repos:
-  ceph:
+  ceph-reef:
     ensure: present
 
 profiles::ceph::client::keyrings: