build

roles/vault_ssh_keys/tasks/main.yml

@@ -11,19 +11,25 @@
           - unzip
           - gnupg
           - python3-debian
+          - ca-certificates
+          - gpg
         state: present
         update_cache: yes
 
-    - name: Download HashiCorp GPG key
+    - name: Download HashiCorp repository signing key
       ansible.builtin.get_url:
         url: https://apt.releases.hashicorp.com/gpg
-        dest: /tmp/hashicorp.gpg
+        dest: /tmp/hashicorp-archive-keyring.asc
+        owner: root
+        group: root
         mode: '0644'
 
-    - name: Dearmor HashiCorp GPG key
-      ansible.builtin.command:
-        cmd: gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg /tmp/hashicorp.gpg
-      args:
+    - name: Install HashiCorp repository signing key
+      ansible.builtin.shell:
+        cmd: >-
+          gpg --dearmor --yes
+          --output /usr/share/keyrings/hashicorp-archive-keyring.gpg
+          /tmp/hashicorp-archive-keyring.asc
         creates: /usr/share/keyrings/hashicorp-archive-keyring.gpg
 
     - name: Read os-release