puppet-prod/hieradata/roles/infra/reposync/syncer.yaml

---
profiles::packages::include:
  createrepo: {}

profiles::ssh::sign::principals:
  - packagerepo.service.consul
  - packagerepo.query.consul
  - "packagerepo.service.%{facts.country}-%{facts.region}.consul"

# additional altnames
profiles::pki::vault::alt_names:
  - packagerepo.main.unkin.net
  - packagerepo.service.consul
  - packagerepo.query.consul
  - "packagerepo.service.%{facts.country}-%{facts.region}.consul"

# configure consul service
consul::services:
  jupyterhub:
    service_name: 'packagerepo'
    tags:
      - 'packagerepo'
    address: "%{facts.networking.ip}"
    port: 443
    checks:
      - id: 'packagerepo_http_check'
        name: 'packagerepo HTTP Check'
        http: "https://%{facts.networking.fqdn}"
        method: 'GET'
        tls_skip_verify: true
        interval: '10s'
        timeout: '1s'
profiles::consul::client::node_rules:
  - resource: service
    segment: packagerepo
    disposition: write

profiles::reposync::webserver::nginx_listen_mode: both
profiles::reposync::webserver::nginx_cert_type: vault
profiles::reposync::repos_list:
  docker_stable_el8:
    repository: 'stable'
    description: 'Docker CE Stable EL8'
    osname: 'docker'
    release: 'el8'
    baseurl: 'https://download.docker.com/linux/centos/8/x86_64/stable/'
    gpgkey: 'https://download.docker.com/linux/centos/gpg'
  docker_stable_el9:
    repository: 'stable'
    description: 'Docker CE Stable EL9'
    osname: 'docker'
    release: 'el9'
    baseurl: 'https://download.docker.com/linux/centos/9/x86_64/stable/'
    gpgkey: 'https://download.docker.com/linux/centos/gpg'
  k8s_1.32:
    repository: '1.32'
    description: 'Kubernetes 1.32'
    osname: 'k8s'
    release: '1.32'
    baseurl: 'https://pkgs.k8s.io/core:/stable:/v1.32/rpm/'
    gpgkey: 'https://pkgs.k8s.io/core:/stable:/v1.32/rpm/repodata/repomd.xml.key'
  mariadb_11_2_el8:
    repository: 'el8'
    description: 'MariaDB 11.2'
    osname: 'mariadb'
    release: '11.2'
    baseurl: 'http://mariadb.mirror.digitalpacific.com.au/yum/11.2/rhel8-amd64/'
    gpgkey: 'https://mariadb.mirror.digitalpacific.com.au/yum/RPM-GPG-KEY-MariaDB'
  puppet7_el8:
    repository: '8'
    description: 'Puppet 7 EL8'
    osname: 'puppet7'
    release: 'el'
    baseurl: 'https://yum.puppet.com/puppet7/el/8/x86_64/'
    gpgkey: 'https://yum.puppet.com/RPM-GPG-KEY-puppet-20250406'
  puppet7_el9:
    repository: '9'
    description: 'Puppet 7 EL9'
    osname: 'puppet7'
    release: 'el'
    baseurl: 'https://yum.puppet.com/puppet7/el/9/x86_64/'
    gpgkey: 'https://yum.puppet.com/RPM-GPG-KEY-puppet-20250406'
  puppet8_el8:
    repository: '8'
    description: 'Puppet 8 EL8'
    osname: 'puppet8'
    release: 'el'
    baseurl: 'https://yum.puppet.com/puppet8/el/8/x86_64/'
    gpgkey: 'https://yum.puppet.com/RPM-GPG-KEY-puppet-20250406'
  puppet8_el9:
    repository: '9'
    description: 'Puppet 8 EL9'
    osname: 'puppet8'
    release: 'el'
    baseurl: 'https://yum.puppet.com/puppet8/el/9/x86_64/'
    gpgkey: 'https://yum.puppet.com/RPM-GPG-KEY-puppet-20250406'
  postgresql_rhel8_common:
    repository: 'common'
    description: 'PostgreSQL Common RHEL 8'
    osname: 'postgresql'
    release: 'rhel8'
    baseurl: 'https://download.postgresql.org/pub/repos/yum/common/redhat/rhel-8-x86_64/'
    gpgkey: 'https://download.postgresql.org/pub/repos/yum/keys/PGDG-RPM-GPG-KEY-RHEL'
  postgresql_rhel9_common:
    repository: 'common'
    description: 'PostgreSQL Common RHEL 9'
    osname: 'postgresql'
    release: 'rhel9'
    baseurl: 'https://download.postgresql.org/pub/repos/yum/common/redhat/rhel-9-x86_64/'
    gpgkey: 'https://download.postgresql.org/pub/repos/yum/keys/PGDG-RPM-GPG-KEY-RHEL'
  postgresql_rhel8_16:
    repository: '16'
    description: 'PostgreSQL 16 RHEL 8'
    osname: 'postgresql'
    release: 'rhel8'
    baseurl: 'https://download.postgresql.org/pub/repos/yum/16/redhat/rhel-8-x86_64/'
    gpgkey: 'https://download.postgresql.org/pub/repos/yum/keys/PGDG-RPM-GPG-KEY-RHEL'
  postgresql_rhel9_16:
    repository: '16'
    description: 'PostgreSQL 16 RHEL 9'
    osname: 'postgresql'
    release: 'rhel9'
    baseurl: 'https://download.postgresql.org/pub/repos/yum/16/redhat/rhel-9-x86_64/'
    gpgkey: 'https://download.postgresql.org/pub/repos/yum/keys/PGDG-RPM-GPG-KEY-RHEL'
  zfs_dkms_rhel8:
    repository: 'dkms'
    description: 'ZFS DKMS RHEL 8'
    osname: 'zfs'
    release: 'rhel8'
    baseurl: 'http://download.zfsonlinux.org/epel/8/x86_64/'
    gpgkey: 'https://packagerepo.service.consul/zfs/gpg/RPM-GPG-KEY-openzfs-2013'
  zfs_kmod_rhel8:
    repository: 'kmod'
    description: 'ZFS KMOD RHEL 8'
    osname: 'zfs'
    release: 'rhel8'
    baseurl: 'http://download.zfsonlinux.org/epel/8/kmod/x86_64/'
    gpgkey: 'https://packagerepo.service.consul/zfs/gpg/RPM-GPG-KEY-openzfs-2013'
  zfs_dkms_rhel9:
    repository: 'dkms'
    description: 'ZFS DKMS RHEL 9'
    osname: 'zfs'
    release: 'rhel9'
    baseurl: 'http://download.zfsonlinux.org/epel/9/x86_64/'
    gpgkey: 'https://packagerepo.service.consul/zfs/gpg/RPM-GPG-KEY-openzfs-2022'
  zfs_kmod_rhel9:
    repository: 'kmod'
    description: 'ZFS KMOD RHEL 9'
    osname: 'zfs'
    release: 'rhel9'
    baseurl: 'http://download.zfsonlinux.org/epel/9/kmod/x86_64/'
    gpgkey: 'https://packagerepo.service.consul/zfs/gpg/RPM-GPG-KEY-openzfs-2022'