# hieradata/os/almalinux/all_releases.yaml
---
profiles::firewall::firewalld::ensure_package: 'absent'
profiles::firewall::firewalld::ensure_service: 'stopped'
profiles::firewall::firewalld::enable_service: false
profiles::puppet::agent::version: '7.37.2'
profiles::puppet::agent::openvox_enable: true

hiera_include:
  - profiles::almalinux::base

profiles::packages::include:
  crypto-policies-scripts: {}
  lzo: {}
  policycoreutils: {}
  unar: {}
  xz: {}

lm-sensors::package: lm_sensors

profiles::yum::global::repos:
  baseos:
    name: baseos
    descr: baseos repository
    target: /etc/yum.repos.d/baseos.repo
    baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/almalinux/%{facts.os.release.full}/BaseOS/%{facts.os.architecture}/os/
    gpgkey: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/almalinux/%{facts.os.release.full}/BaseOS/%{facts.os.architecture}/os/RPM-GPG-KEY-AlmaLinux-%{facts.os.release.major}
    mirrorlist: absent
  extras:
    name: extras
    descr: extras repository
    target: /etc/yum.repos.d/extras.repo
    baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/almalinux/%{facts.os.release.full}/extras/%{facts.os.architecture}/os/
    gpgkey: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/almalinux/%{facts.os.release.full}/extras/%{facts.os.architecture}/os/RPM-GPG-KEY-AlmaLinux-%{facts.os.release.major}
    mirrorlist: absent
  appstream:
    name: appstream
    descr: appstream repository
    target: /etc/yum.repos.d/appstream.repo
    baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/almalinux/%{facts.os.release.full}/AppStream/%{facts.os.architecture}/os/
    gpgkey: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/almalinux/%{facts.os.release.full}/AppStream/%{facts.os.architecture}/os/RPM-GPG-KEY-AlmaLinux-%{facts.os.release.major}
    mirrorlist: absent
  highavailability:
    name: highavailability
    descr: highavailability repository
    target: /etc/yum.repos.d/highavailability.repo
    baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/almalinux/%{facts.os.release.full}/HighAvailability/%{facts.os.architecture}/os/
    gpgkey: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/almalinux/%{facts.os.release.full}/HighAvailability/%{facts.os.architecture}/os/RPM-GPG-KEY-AlmaLinux-%{facts.os.release.major}
    mirrorlist: absent
  crb:
    ensure: absent
    name: crb
    descr: crb repository
    target: /etc/yum.repos.d/crb.repo
    baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/almalinux/%{facts.os.release.full}/CRB/%{facts.os.architecture}/os/
    gpgkey: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/almalinux/%{facts.os.release.full}/CRB/%{facts.os.architecture}/os/RPM-GPG-KEY-AlmaLinux-%{facts.os.release.major}
    mirrorlist: absent
  epel:
    name: epel
    descr: epel repository
    target: /etc/yum.repos.d/epel.repo
    baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/epel/%{facts.os.release.major}/Everything/%{facts.os.architecture}
    gpgkey: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/epel/RPM-GPG-KEY-EPEL-%{facts.os.release.major}
    mirrorlist: absent
  unkinben:
    name: unkinben
    descr: unkinben repository
    target: /etc/yum.repos.d/unkin.repo
    baseurl: https://git.query.consul/api/packages/unkinben/rpm/el%{facts.os.release.major}
    gpgkey: https://git.query.consul/api/packages/unkinben/rpm/repository.key
    gpgcheck: false
    mirrorlist: absent

  # Additional repositories - default to absent, roles can override with ensure: present
  # FRRouting repositories
  frr-extras:
    ensure: absent
    name: frr-extras
    descr: frr-extras repository
    target: /etc/yum.repos.d/frr-extras.repo
    baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/frr/el%{facts.os.release.major}/frr/%{facts.os.architecture}
    gpgcheck: false
    mirrorlist: absent
  frr-stable:
    ensure: absent
    name: frr-stable
    descr: frr-stable repository
    target: /etc/yum.repos.d/frr-stable.repo
    baseurl: https://packagerepo.service.consul/frr/el9/stable-daily/%{facts.os.architecture}/os
    gpgcheck: false
    mirrorlist: absent

  # PostgreSQL repositories
  postgresql-15:
    ensure: absent
    name: postgresql-15
    descr: postgresql-15 repository
    target: /etc/yum.repos.d/postgresql.repo
    baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/postgresql/15/redhat/rhel-%{facts.os.release.major}-%{facts.os.architecture}
    gpgkey: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/postgresql/keys/PGDG-RPM-GPG-KEY-RHEL
  postgresql-17:
    ensure: absent
    name: postgresql-17
    descr: postgresql-17 repository
    target: /etc/yum.repos.d/postgresql.repo
    baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/postgresql/17/redhat/rhel-%{facts.os.release.major}-%{facts.os.architecture}
    gpgkey: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/postgresql/keys/PGDG-RPM-GPG-KEY-RHEL
  postgresql-common:
    ensure: absent
    name: postgresql-common
    descr: postgresql-common repository
    target: /etc/yum.repos.d/postgresql.repo
    baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/postgresql/common/redhat/rhel-%{facts.os.release.major}-%{facts.os.architecture}
    gpgkey: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/postgresql/keys/PGDG-RPM-GPG-KEY-RHEL

  # Ceph repositories
  ceph:
    ensure: absent
    name: ceph
    descr: ceph repository
    target: /etc/yum.repos.d/ceph.repo
    baseurl: https://packagerepo.service.consul/ceph/reef/rhel%{facts.os.release.major}/x86_64/
    gpgkey: https://packagerepo.service.consul/ceph/reef/rhel%{facts.os.release.major}/x86_64/repodata/repomd.xml.key
    gpgcheck: 1
    mirrorlist: absent
  ceph-noarch:
    ensure: absent
    name: ceph-noarch
    descr: ceph noarch repository
    target: /etc/yum.repos.d/ceph.repo
    baseurl: https://packagerepo.service.consul/ceph/reef/rhel%{facts.os.release.major}/noarch/
    gpgkey: https://packagerepo.service.consul/ceph/reef/rhel%{facts.os.release.major}/x86_64/repodata/repomd.xml.key
    gpgcheck: 1
    mirrorlist: absent
  ceph-reef:
    ensure: absent
    name: ceph-reef
    descr: ceph reef repository
    target: /etc/yum.repos.d/ceph.repo
    baseurl: https://packagerepo.service.consul/ceph/reef/rhel%{facts.os.release.major}/%{facts.os.architecture}/
    gpgkey: https://packagerepo.service.consul/ceph/reef/rhel%{facts.os.release.major}/%{facts.os.architecture}/repodata/repomd.xml.key
    gpgcheck: 0
    mirrorlist: absent

  # Rancher RKE2 repositories
  rancher-rke2-common-latest:
    ensure: absent
    name: rancher-rke2-common
    descr: rancher-rke2-common repository
    target: /etc/yum.repos.d/rancher-rke2-common.repo
    baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/rke2/rke2/latest/common/centos/%{facts.os.release.major}/noarch
    gpgkey: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/rke2/public.key
    gpgcheck: 1
    mirrorlist: absent
  rancher-rke2-1-33-latest:
    ensure: absent
    name: rancher-rke2-1.33-latest
    descr: rancher-rke2-1.33-latest repository
    target: /etc/yum.repos.d/rancher-rke2.repo
    baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/rke2/rke2/latest/1.33/centos/%{facts.os.release.major}/%{facts.os.architecture}
    gpgkey: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/rke2/public.key
    gpgcheck: 1
    mirrorlist: absent

  # CentOS repositories for legacy systems
  centos_8_advanced_virtualization:
    ensure: absent
    name: centos_8_advanced_virtualization
    descr: centos_8_advanced_virtualization repository
    target: /etc/yum.repos.d/centos.repo
    baseurl: https://edgecache.query.consul/centos/8/virt/x86_64/advanced-virtualization
    gpgkey: http://edgecache.query.consul/centos/RPM-GPG-KEY-CentOS-SIG-Virtualization
    gpgcheck: 1
    mirrorlist: absent
  centos_8_ceph_pacific:
    ensure: absent
    name: centos_8_ceph_pacific
    descr: centos_8_ceph_pacific repository
    target: /etc/yum.repos.d/centos.repo
    baseurl: https://edgecache.query.consul/centos/8/storage/x86_64/ceph-pacific
    gpgkey: http://edgecache.query.consul/centos/RPM-GPG-KEY-CentOS-SIG-Storage
    gpgcheck: 1
    mirrorlist: absent
  centos_8_rabbitmq_38:
    ensure: absent
    name: centos_8_rabbitmq_38
    descr: centos_8_rabbitmq_38 repository
    target: /etc/yum.repos.d/centos.repo
    baseurl: https://edgecache.query.consul/centos/8/messaging/x86_64/rabbitmq-38
    gpgkey: http://edgecache.query.consul/centos/RPM-GPG-KEY-CentOS-SIG-Messaging
    gpgcheck: 1
    mirrorlist: absent
  centos_8_nfv_openvswitch:
    ensure: absent
    name: centos_8_nfv_openvswitch
    descr: centos_8_nfv_openvswitch repository
    target: /etc/yum.repos.d/centos.repo
    baseurl: https://edgecache.query.consul/centos/8/nfv/x86_64/openvswitch-2
    gpgkey: http://edgecache.query.consul/centos/RPM-GPG-KEY-CentOS-SIG-NFV
    gpgcheck: 1
    mirrorlist: absent
  centos_8_openstack_xena:
    ensure: absent
    name: centos_8_openstack_xena
    descr: centos_8_openstack_xena repository
    target: /etc/yum.repos.d/centos.repo
    baseurl: https://edgecache.query.consul/centos/8/cloud/x86_64/openstack-xena
    gpgkey: http://edgecache.query.consul/centos/RPM-GPG-KEY-CentOS-SIG-Cloud
    gpgcheck: 1
    mirrorlist: absent
  centos_8_opstools:
    ensure: absent
    name: centos_8_opstools
    descr: centos_8_opstools repository
    target: /etc/yum.repos.d/centos.repo
    baseurl: https://edgecache.query.consul/centos/8/opstools/x86_64/collectd-5
    gpgkey: http://edgecache.query.consul/centos/RPM-GPG-KEY-CentOS-SIG-OpsTools
    gpgcheck: 1
    mirrorlist: absent
  centos_8_ovirt45:
    ensure: absent
    name: centos_8_ovirt45
    descr: centos_8_ovirt45 repository
    target: /etc/yum.repos.d/centos.repo
    baseurl: https://edgecache.query.consul/centos/8/virt/x86_64/ovirt-45
    gpgkey: http://edgecache.query.consul/centos/RPM-GPG-KEY-CentOS-SIG-Virtualization
    gpgcheck: 1
    mirrorlist: absent
  centos_8_stream_gluster10:
    ensure: absent
    name: centos_8_stream_gluster10
    descr: centos_8_stream_gluster10 repository
    target: /etc/yum.repos.d/centos.repo
    baseurl: https://edgecache.query.consul/centos/8-stream/storage/x86_64/gluster-10
    gpgkey: http://edgecache.query.consul/centos/RPM-GPG-KEY-CentOS-SIG-Storage
    gpgcheck: 1
    mirrorlist: absent

  # Additional repositories
  zfs-kmod:
    ensure: absent
    name: zfs-kmod
    descr: zfs-kmod repository
    target: /etc/yum.repos.d/zfs.repo
    baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/zfs/epel/%{facts.os.release.major}/kmod/%{facts.os.architecture}/
    gpgcheck: false
    mirrorlist: absent
  rpmfusion-free:
    ensure: absent
    name: rpmfusion-free
    descr: rpmfusion-free repository
    target: /etc/yum.repos.d/rpmfusion-free.repo
    baseurl: https://packagerepo.service.consul/rpmfusion-free-el%{facts.os.release.major}-%{facts.os.architecture}/
    gpgkey: https://packagerepo.service.consul/rpmfusion-free-el%{facts.os.release.major}-%{facts.os.architecture}/repodata/repomd.xml.key
    gpgcheck: 1
    mirrorlist: absent
  rpmfusion-nonfree:
    ensure: absent
    name: rpmfusion-nonfree
    descr: rpmfusion-nonfree repository
    target: /etc/yum.repos.d/rpmfusion-nonfree.repo
    baseurl: https://packagerepo.service.consul/rpmfusion-nonfree-el%{facts.os.release.major}-%{facts.os.architecture}/
    gpgkey: https://packagerepo.service.consul/rpmfusion-nonfree-el%{facts.os.release.major}-%{facts.os.architecture}/repodata/repomd.xml.key
    gpgcheck: 1
    mirrorlist: absent
  unkin:
    name: unkin
    descr: unkin repository
    target: /etc/yum.repos.d/unkin.repo
    baseurl: https://git.query.consul/api/packages/unkin/rpm/almalinux/el%{facts.os.release.major}
    gpgkey: https://git.query.consul/api/packages/unkin/rpm/repository.key
    gpgcheck: false
    mirrorlist: absent