Foreman » Installer

Add user and group parameters

Enable pki-core module on EL8

On EL8 Candlepin needs the pki-module to be enabled. This needs Puppet
5.5.20 or Puppet 6.15.0 which introduced the dnfmodule provider.

Drop dependency on puppet-selinux

selinux depends on on selinux_core which provides the selboolean type.
selinux::boolean is a thin wrapper around this but it doesn't provide
anything more than this.

Refs #31346 - Expose java_package parameter

The java_package parameter allows installing Java 11. Because the candlepin
package depends on java, it should be installed prior to installing candlepin.
Otherwise you end up with two java packages installed.

Refs #29220 - Add missing parameter

504ed85be6eabf3a9aa7d431093bda74adc4682e introduced this variable, but
lacked the actual parameter. While it was inherited so the default at
least worked, the latest puppet-lint-param-docs requires all parameters
that are documented to actually exist. There is a @param statement for...

Fixes #30523: Create providers to make database migration idempotent

Refs #30346: Expect an actual truststore instead of re-using keystore

Use the namespaced pg password function

Since puppetlabs/postgresql 6.5.0 the non-namespaced function raises a
deprecation warning. This uses the modern version.

Make candlepin::repo a standalone class

Fixes #29625 - Stop accepting TLS 1.1 connections

Katello is the only thing connecting to Candlepin and current setups
shouldn't use TLS 1.1 anymore. PCI compliant setups are also required to
disable it. By doing this out of the box, the software becomes more...