automatically remove expired ppa key

playbooks/roles/common/tasks/main.yml

@@ -51,6 +51,13 @@
     repo: "{{ common_git_ppa }}"
   when: ansible_distribution in common_debian_variants
 
+- name: Check for expired edx key
+  command: "apt-key list | grep {{ COMMON_EDX_PPA_KEY_ID }}"
+  register: ppa_key_status
+
+- name: remove expired edx key
+  command: "sudo apt-key remove {{ COMMON_EDX_PPA_KEY_ID }}"
+  when: 'expired' in  ppa_key_status.stdout
 
 # Ensure that we can install old software if need be.
 - name: Add edX PPA apt key