allow deploying foreman in fips mode directly

evgeni · ehelms · commit 5039cc61bc12 · 2025-11-06T15:17:05.000-05:00
diff --git a/pipelines/clone/02-setup.yml b/pipelines/clone/02-setup.yml
@@ -16,6 +16,8 @@
     - role: disable_firewall
     - role: foreman_server_repositories
     - role: packit
+    - role: fips
+      when: foreman_fips | default(false)
     - role: fapolicyd
       when: foreman_fapolicyd | default(false)
     - role: update_os_packages
diff --git a/roles/foreman/meta/main.yml b/roles/foreman/meta/main.yml
@@ -2,6 +2,8 @@
 dependencies:
   - role: umask
   - role: selinux
+  - role: fips
+    when: foreman_fips | default(false)
   - role: fapolicyd
     when: foreman_fapolicyd | default(false)
   - role: etc_hosts
