check signatures for release pulpcore repositories

theforeman · Jun 14, 2024 · 65b3a1f · 65b3a1f
1 parent d893357
commit 65b3a1f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/roles/pulpcore_repositories/tasks/main.yml b/roles/pulpcore_repositories/tasks/main.yml
@@ -4,7 +4,8 @@
     name: pulpcore-repository
     description: Pulpcore {{ pulpcore_repositories_version }}
     baseurl: "https://yum.theforeman.org/pulpcore/{{ pulpcore_repositories_version }}/el{{ ansible_distribution_major_version }}/x86_64/"
-    gpgcheck: no
+    gpgcheck: "{{ 'no' if pulpcore_repositories_version == 'nightly' else 'yes' }}"
+    gpgkey: "https://yum.theforeman.org/pulpcore/{{ pulpcore_repositories_version }}/GPG-RPM-KEY-pulpcore"
     enabled: yes
 
 - name: 'Disable pulpcore:el8 module'