diff --git a/global/overlay/etc/puppet/cosmos-rules.yaml b/global/overlay/etc/puppet/cosmos-rules.yaml
index f2a6d657..004753e9 100644
--- a/global/overlay/etc/puppet/cosmos-rules.yaml
+++ b/global/overlay/etc/puppet/cosmos-rules.yaml
@@ -1195,7 +1195,4 @@ idm-sto1-test-redis-1\.komreg\.net:
    autoupdate:
    sunet::dockerhost2:
      nat: false
-   sunet::rediscluster:
-     numnodes: 1
-     hostmode: true
-     tls: true
+   eid:idm_redis:
diff --git a/global/overlay/etc/puppet/modules/eid/manifests/idm_redis.pp b/global/overlay/etc/puppet/modules/eid/manifests/idm_redis.pp
new file mode 100644
index 00000000..9b5b55a0
--- /dev/null
+++ b/global/overlay/etc/puppet/modules/eid/manifests/idm_redis.pp
@@ -0,0 +1,22 @@
+# idm_redis
+class eid::idm_redis (
+) {
+
+  class { 'sunet::rediscluster':
+    numnodes => 1,
+    hostmode => true,
+    tls      => true
+  }
+
+  file { "/etc/ssl/certs/${facts['networking']['fqdn']}_infra.crt":
+    mode   => '0644',
+  }
+
+  file { '/etc/ssl/private':
+    mode   => '0711',
+  }
+
+  package { ['redis-tools']:
+    ensure => installed,
+  }
+}