From 99e45f2929e61441f9eaebd32d56625f5ec95224 Mon Sep 17 00:00:00 2001
From: David Galloway <dgallowa@redhat.com>
Date: Mon, 23 Mar 2020 14:23:49 -0400
Subject: [PATCH] ansible: Install Buster GPG keys

Signed-off-by: David Galloway <dgallowa@redhat.com>
---
 ansible/examples/slave.yml        | 25 +++++++++++++++++++++++++
 ansible/examples/slave_static.yml | 25 +++++++++++++++++++++++++
 2 files changed, 50 insertions(+)

diff --git a/ansible/examples/slave.yml b/ansible/examples/slave.yml
index 64a4fbc1..b97e3adc 100644
--- a/ansible/examples/slave.yml
+++ b/ansible/examples/slave.yml
@@ -303,6 +303,7 @@
         - automake
         - libssl-dev
         - libffi-dev
+        - debian-keyring
         - debian-archive-keyring
         # jenkins-job-builder job:
         - libyaml-dev
@@ -356,6 +357,30 @@
         id: 518E17E1
       when: ansible_pkg_mgr  == "apt"
 
+    - name: Add the Debian Buster Key
+      apt_key:
+       id: 3CBBABEE
+       url: https://ftp-master.debian.org/keys/archive-key-10.asc
+       keyring: /etc/apt/trusted.gpg
+       state: present
+      when: ansible_pkg_mgr  == "apt"
+
+    - name: Add the Debian Security Buster Key
+      apt_key:
+        id: CAA96DFA
+        url: https://ftp-master.debian.org/keys/archive-key-10-security.asc
+        keyring: /etc/apt/trusted.gpg
+        state: present
+      when: ansible_pkg_mgr  == "apt"
+
+    - name: Add the Debian Buster Stable Key
+      apt_key:
+        id: 77E11517
+        url: https://ftp-master.debian.org/keys/release-10.asc
+        keyring: /etc/apt/trusted.gpg
+        state: present
+      when: ansible_pkg_mgr  == "apt"
+
     - name: Install openjdk-7-jre
       apt:
         name: openjdk-7-jre
diff --git a/ansible/examples/slave_static.yml b/ansible/examples/slave_static.yml
index 08af14d2..70717b7f 100644
--- a/ansible/examples/slave_static.yml
+++ b/ansible/examples/slave_static.yml
@@ -207,6 +207,7 @@
         - autotools-dev
         - automake
         - cmake
+        - debian-keyring
         - debian-archive-keyring
         # jenkins-job-builder job:
         - libyaml-dev
@@ -254,6 +255,30 @@
       when: ansible_pkg_mgr  == "apt"
       apt_key: id=518E17E1 url=http://download.ceph.com/keys/jessie-stable-release.asc keyring=/etc/apt/trusted.gpg state=present
 
+    - name: Add the Debian Buster Key
+      apt_key:
+       id: 3CBBABEE
+       url: https://ftp-master.debian.org/keys/archive-key-10.asc
+       keyring: /etc/apt/trusted.gpg
+       state: present
+      when: ansible_pkg_mgr  == "apt"
+
+    - name: Add the Debian Security Buster Key
+      apt_key:
+        id: CAA96DFA
+        url: https://ftp-master.debian.org/keys/archive-key-10-security.asc
+        keyring: /etc/apt/trusted.gpg
+        state: present
+      when: ansible_pkg_mgr  == "apt"
+
+    - name: Add the Debian Buster Stable Key
+      apt_key:
+        id: 77E11517
+        url: https://ftp-master.debian.org/keys/release-10.asc
+        keyring: /etc/apt/trusted.gpg
+        state: present
+      when: ansible_pkg_mgr  == "apt"
+
     - name: Install openjdk-7-jre
       apt: name=openjdk-7-jre state=present
       when:
-- 
2.39.5