Improvement for cookbook-omnibus-gitlab to download new package keys
Summary
Improve the chef cookbook cookbook-omnibus-gitlab
such that when a new package key is provided/updated, apt
is then updated with this new key automatically. Currently our cookbook downloads this once and we do not provide a mechanism to allow it to be updated.
Reference: creates
at: https://gitlab.com/gitlab-org/cookbook-omnibus-gitlab/-/blob/6306445545ae2fe2efc92b81104cc9c3e44b84ce/recipes/default.rb#L48
Related Incident(s)
Originating issue(s): production#6469 (closed)
Desired Outcome/Acceptance Criteria
When they key is updated, our chef servers do not fail when apt update
is run.
Associated Services
Corrective Action Issue Checklist
-
Link the incident(s) this corrective action arose out of -
Give context for what problem this corrective action is trying to prevent from re-occurring -
Assign a severity label (this is the highest sev of related incidents, defaults to 'severity::4') -
Assign a priority (this will default to 'priority::4')
Edited by John Skarbek