Use default crypto policy in AIOs for ed25519

Alex-Welsh · Alex-Welsh · commit 23780aeb8647 · 2024-08-12T13:34:43.000+01:00
AIOs are usually their own ansible control host, so CIS hardening can
cut off user access when using ed25519 keys. This change sets the cryto
policy back to DEFAULT.
diff --git a/etc/kayobe/environments/ci-aio/inventory/group_vars/cis-hardening/cis b/etc/kayobe/environments/ci-aio/inventory/group_vars/cis-hardening/cis
@@ -0,0 +1,3 @@
+---
+# Don't use FIPS since it blocks ed25519 keys
+rhel9cis_crypto_policy: DEFAULT

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+---`
	`2`	`+# Don't use FIPS since it blocks ed25519 keys`
	`3`	`+rhel9cis_crypto_policy: DEFAULT`