[kvelarde-itential]

Adds EL10 (RHEL/Rocky/AlmaLinux 10) support to the itential.valkey collection, alongside EL9 and Amazon Linux 2023. Also fixes the certify "Display report summary" message.

Changes

EL10 support

• tasks/validate-vars.yml: the supported-OS assert now accepts major version 10.
• vars/platform-release-6.yml: added a "10" key to valkey_packages_default (valkey; Rocky 10 AppStream ships 8.0.x).
• tasks/disable-thp.yml: TuneD 2.27 on EL10 only searches /usr/lib/tuned/profiles and /etc/tuned/profiles for custom profiles. The virtual-guest-no-thp profile is now written to /etc/tuned/profiles on EL10 and /etc/tuned elsewhere. The tuned service is also started before tuned-adm runs. This is the same fix as itential.deployer #380 for MongoDB.
• vars/main.yml: the repository connectivity check was hardcoded to AppStream-9. It now uses AppStream-<ansible_distribution_major_version>. valkey_required_repositories is now a conditional that resolves to an empty list on Amazon Linux, where there is no matching Rocky mirror (AppStream-2023 returns 404). The Rocky entry moved to a new variable, valkey_appstream_repositories.

Certify report summary fix

• tasks/certify-valkey.yml and tasks/certify-sentinel.yml: the old message printed the remote path as the location on "both the remote and control nodes". It now prints separate "Remote report" and "Local report" lines, with the local path built from *_certify_report_dir_local.

Docs

• Updated to EL9/EL10 and Amazon Linux 2023: README.md, CLAUDE.md, roles/valkey/CLAUDE.md (with new notes on the EL10 TuneD handling and the repo-check logic), docs/valkey_guide.md, galaxy.yml, example_inventories/valkey/valkey_appstream.yaml and the platform-release-6.yml header comment.

Things to know

• Not tested using themis on a live EL10 host. themis has no EL10 tfvars. I only ran ansible-lint (0 failures, no new warnings beyond one line-length warning in certify-sentinel.yml) and rendered the repo-check variable for Rocky 9, Rocky 10 and Amazon 2023.
• Deployer dependency. The collection depends on itential.deployer >=4.0.0. EL10 verify-host support (#380) is merged to deployer dev but not in a tag (latest is v4.1.0), so the Valkey verify tasks will reject EL10 until a release includes it.
• Empty repo list on Amazon Linux. I haven't run the verify playbook on an Amazon Linux host to confirm verify-connectivity handles it.
• No CHANGELOG entry. CHANGELOG.md only has 1.0.0.

Test plan

• Run verify, install and certify on Rocky or RHEL 10, checking the virtual-guest-no-thp profile in /etc/tuned/profiles and tuned-adm active
• Confirm the certify summary shows the correct local report path