Skip to content

Commit d1e3f1a

Browse files
committed
Use default crypto policy in AIOs for ed25519
AIOs are usually their own ansible control host, so CIS hardening can cut off user access when using ed25519 keys. This change sets the cryto policy back to DEFAULT.
1 parent d4b92f4 commit d1e3f1a

File tree

1 file changed

+3
-0
lines changed
  • etc/kayobe/environments/ci-aio/inventory/group_vars/cis-hardening

1 file changed

+3
-0
lines changed
Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
---
2+
# Don't use FIPS since it blocks ed25519 keys
3+
rhel9cis_crypto_policy: DEFAULT

0 commit comments

Comments
 (0)