Skip to content

Commit

Permalink
Import RPM keys directly from URL
Browse files Browse the repository at this point in the history
Forced downloads to `/tmp/` are not idempotent.
  • Loading branch information
thetic committed Mar 2, 2023
1 parent 3c2c471 commit 0599495
Showing 1 changed file with 3 additions and 21 deletions.
24 changes: 3 additions & 21 deletions tasks/pkg-redhat.yml
Original file line number Diff line number Diff line change
Expand Up @@ -25,39 +25,21 @@
) else 'yes'
) }}
- name: Download current RPM key
get_url:
url: "{{ datadog_yum_gpgkey_current }}"
dest: /tmp/DATADOG_RPM_KEY_CURRENT.public
force: yes

- name: Import current RPM key
rpm_key:
key: /tmp/DATADOG_RPM_KEY_CURRENT.public
key: "{{ datadog_yum_gpgkey_current }}"
state: present
when: not ansible_check_mode

- name: Download new RPM key (Expires in 2022)
get_url:
url: "{{ datadog_yum_gpgkey_e09422b3 }}"
dest: /tmp/DATADOG_RPM_KEY_E09422B3.public
checksum: "sha256:{{ datadog_yum_gpgkey_e09422b3_sha256sum }}"

- name: Import new RPM key (Expires in 2022)
rpm_key:
key: /tmp/DATADOG_RPM_KEY_E09422B3.public
key: "{{ datadog_yum_gpgkey_e09422b3 }}"
state: present
when: not ansible_check_mode

- name: Download new RPM key (Expires in 2024)
get_url:
url: "{{ datadog_yum_gpgkey_20200908 }}"
dest: /tmp/DATADOG_RPM_KEY_20200908.public
checksum: "sha256:{{ datadog_yum_gpgkey_20200908_sha256sum }}"

- name: Import new RPM key (Expires in 2024)
rpm_key:
key: /tmp/DATADOG_RPM_KEY_20200908.public
key: "{{ datadog_yum_gpgkey_20200908 }}"
state: present
when: not ansible_check_mode

Expand Down

0 comments on commit 0599495

Please sign in to comment.