Project

General

Profile

« Previous | Next » 

Revision d83807b2

Added by Ewoud Kohl van Wijngaarden about 1 month ago

Fixes #37297 - Use SCRAM passwd encryption with PostgreSQL

PostgreSQL supports SCRAM encryption and PostgreSQL 14 will also default
to this. Moving to it sooner helps removing md5 from the system.

View differences:

Puppetfile
# HTTP/2 and SSL support for settings in Hiera
mod 'puppetlabs/apache', '>= 8.3'
# Ensure Debian 11 support
mod 'puppetlabs/postgresql', '>= 7.4.0'
# SCRAM password support
mod 'puppetlabs/postgresql', '>= 10.1'
# Dnfmodule support for Redis 6+ support
mod 'puppet/redis', '>= 8.5.0'
config/foreman.hiera/common.yaml
foreman::config::apache::proxy_params:
retry: '0'
timeout: '900'
# Match default in PostgreSQL 14+ sooner to phase out MD5
postgresql::globals::password_encryption: 'scram-sha-256'

Also available in: Unified diff