check signatures for candlepin packages

theforeman · Jun 14, 2024 · d893357 · d893357
1 parent a94af75
commit d893357
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/roles/candlepin_repositories/tasks/main.yml b/roles/candlepin_repositories/tasks/main.yml
@@ -4,7 +4,8 @@
     name: candlepin-repository
     description: Candlepin {{ candlepin_repositories_version }}
     baseurl: "https://yum.theforeman.org/candlepin/{{ candlepin_repositories_version }}/el{{ ansible_distribution_major_version }}/$basearch/"
-    gpgcheck: no
+    gpgcheck: "{{ 'no' if candlepin_repositories_version == 'nightly' else 'yes' }}"
+    gpgkey: "https://yum.theforeman.org/candlepin/{{ candlepin_repositories_version }}/RPM-GPG-KEY-candlepin"
     enabled: yes
 
 - name: 'Enable pki-core module'