[ansible] JFrog Platform 10.1.0 release (#185)

Ansible/ansible_collections/jfrog/platform/roles/postgres/tasks/RedHat.yml

@@ -1,20 +1,3 @@
-- name: Import EPEL GPG public key
-  become: yes
-  rpm_key:
-    key: https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-{{ version }}
-    state: present
-  vars:
-    version: "{{ ansible_distribution_major_version }}"
-
-- name: Install EPEL repository
-  become: yes
-  yum:
-    name: https://dl.fedoraproject.org/pub/epel/epel-release-latest-{{ version }}.noarch.rpm
-    state: present
-  vars:
-    version: "{{ ansible_distribution_major_version }}"
-  when: ansible_distribution in ['CentOS', 'RedHat']
-
 - name: Install prerequisite packages
   become: yes
   yum:

Ansible/ansible_collections/jfrog/platform/roles/postgres/tasks/install.yml

@@ -31,6 +31,12 @@
   environment:
     LC_ALL: "{{ postgres_locale }}"
 
+- name: Check FIPS status
+  command: cat /proc/sys/crypto/fips_enabled
+  register: _fips_enabled
+  ignore_errors: true
+  changed_when: false
+
 - name: Setup postgres configuration files
   become: yes
   become_user: postgres

Ansible/ansible_collections/jfrog/platform/roles/postgres/tasks/main.yml

@@ -1,3 +1,3 @@
 - name: Install postgres
   include_tasks: "install.yml"
-  when: postgres_enabled
+  when: postgres_enabled | bool

Ansible/ansible_collections/jfrog/platform/roles/postgres/templates/postgresql.conf.j2

@@ -97,7 +97,12 @@ max_connections = {{ postgres_server_max_connections }}			# (change requires res
 #ssl_key_file = 'server.key'		# (change requires restart)
 #ssl_ca_file = ''			# (change requires restart)
 #ssl_crl_file = ''			# (change requires restart)
+
+{% if _fips_enabled.stdout | default('unknown', true) == '1' %}
+password_encryption = scram-sha-256
+{% else %}
 #password_encryption = on
+{% endif %}
 #db_user_namespace = off
 #row_security = on