Merge pull request #4261 from edx/derf/detect_and_replace_expired_key

check for and replace expired key

playbooks/roles/server_utils/defaults/main.yml

@@ -39,3 +39,6 @@ server_utils_debian_pkgs:
   - netcat
 
 server_utils_redhat_pkgs: []
+
+SERVER_UTILS_EDX_PPA_KEY_ID: "69464050"
+SERVER_UTILS_EDX_PPA_KEY_SERVER: "keyserver.ubuntu.com"

playbooks/roles/server_utils/tasks/main.yml

@@ -21,6 +21,14 @@
 #
 #
 
+- name: Check for expired edx key
+  command: "apt-key list | grep {{ SERVER_UTILS_EDX_PPA_KEY_ID }}"
+  register: ppa_key_status
+
+- name: remove expired edx key
+  command: "sudo apt-key adv --keyserver {{ SERVER_UTILS_EDX_PPA_KEY_SERVER }} --recv-keys {{ SERVER_UTILS_EDX_PPA_KEY_ID }}"
+  when: "'expired' in  ppa_key_status.stdout"
+
 - name: Install ubuntu system packages
   apt:
     name: "{{ item }}"