Foreman » Installer

consistently use stdlib::ensure_packages()

In b6088261c08ddfa8d3426ba01c6b35a3d1b1d3a2 ewoud already introduced
`stdlib::ensure_packages()`. There's another place that used the legacy
`ensure_packages()` function. It's deprecated since stdlib 9. This
commit updates the old code to also use `stdlib::ensure_packages()`

Fixes #37291 - Use explicit java on RH with Puppetserver 8

The /usr/bin/java file may point to any version. This changes the logic
to determine the java version (unless explicitly specified) dynamically
based on the puppetserver version and the OS.

Disable FIPS on EL8+

Add puppet8 certificate renewal endpoint

From https://www.puppet.com/docs/puppet/8/server/http_certificate_renew

set PrivateTmp=true for puppetserver

Refs #36620 - Replace whitelist with allowlist

Fixes #35943 - Switch to puppetlabs vcsrepo for gitrepo tracking

Support new non-AIO puppet Debian packages

The upcoming release of Debian will ship with a new non-AIO puppetserver
package, and these configuration tweaks are needed to make the module
compatible with it.

Respect puppet::server::additional_settings parameter

Previously it was read from the main puppet class, instead of
puppet::server (which in turn defaulted to the parameter from the main
class).

Drop Puppet 6 support