[the last part of] initial el8 / almalinux support

[jhoblitt]

Based on:

• fix lldpd order of operations error #604
• decouple profile mod spec from production hiera data #605
• (profile::core::puppet_master) rm duplicate cron resource spec #608
• add spec coverage for all roles #610
• (common) fix setting of yum::plugin::versionlock::clean param #614
• test classes/defines using facterdb data #622
• (spec) reduce role catchall to one site per OS at random #623
• (foreman role) add foreman discovery plugin #627
• puppet6 -> puppet7 migration #639
• update to modern yum::versionlock api  #642
• docker cleanup/update #643
• replace inline code with lsst/smee mod to gain EL8 support #644
• replace inline kubectl install code with lsst/kubectl mod #645
• fix ipareplica role versionlock release string #646
• (Puppetfile) bump ceritsc/tuned ref to pickup AlmaLinux support #647
• rely on puppet/yum module to manage the default os yum repos for all members of the EL osfamily #648
• update misc puppet mods for EL8/AlmaLinux support #654
• (dnscache role) change default bind logging to notice #659
• (rke role) ensure br_netfilter kmod is loaded #660
• (Puppetfile) bump puppetlabs/vcsrepo to 5.3.0 #662
• (profile::core::keytab) mv keytab to /var/lib/keytabs/<user> #667
• generic preparations for EL8 #670
• (dnscache role/nodes) prepare for EL8 stable interfaces names #672
• bump simp/auditd to cb9f14c to pickup AlmaLinux 8 support #673
• (spec) test roles against AlmaLinux 8 #674
• (profile::core::docker) add EL8 versionlock support #675
• (rke role) ensure ipa is setup prior to using rke user #676
• (pillan cluster) add new EL8 nodes pillan07-09 #679
• prepare pillan cluster for EL8 #680

Roles tested as working on EL8:

• generic
• dnscache
• rke

[jhoblitt]

Split out of #585

[cbarria]

mayor effort on this, thanks 💯