We need more tooling

global/overlay/etc/puppet/cosmos-rules.yaml

@@ -1195,7 +1195,4 @@ idm-sto1-test-redis-1\.komreg\.net:
    autoupdate:
    sunet::dockerhost2:
      nat: false
-   sunet::rediscluster:
+   eid:idm_redis:
-     numnodes: 1
-     hostmode: true
-     tls: true

global/overlay/etc/puppet/modules/eid/manifests/idm_redis.pp

@@ -0,0 +1,22 @@
+# idm_redis
+class eid::idm_redis (
+) {
+
+  class { 'sunet::rediscluster':
+    numnodes => 1,
+    hostmode => true,
+    tls      => true
+  }
+
+  file { "/etc/ssl/certs/${facts['networking']['fqdn']}_infra.crt":
+    mode   => '0644',
+  }
+
+  file { '/etc/ssl/private':
+    mode   => '0711',
+  }
+
+  package { ['redis-tools']:
+    ensure => installed,
+  }
+}