GPG expired for at least Ubuntu 22.04

[tam116]

Describe the Bug

The GPG used by the module to authenticate the APT repos is expired. At least on Puppet Enterprise installs

Steps to Reproduce

Steps to reproduce the behavior:

1. Use this module to manage the puppet repos
2. Run apt update

Environment

• Version: 2023.8.2
• Platform: Ubuntu 22.04, maybe others

Additional Context

Replacing https://github.com/puppetlabs/puppetlabs-puppet_agent/blob/main/files/GPG-KEY-puppet-20250406 with the contents of the GPG linked here resolves the issue https://portal.perforce.com/s/article/Expired-GPG-Key-agent-installation-fail-PE-2021-7-to-2023-8-Debian-Ubuntu-SLES15

[bjparki-cccs]

Is there a new release planned to deploy the new key to existing clients? (soon?)

[choffee]

The new key is here: https://apt.puppet.com/DEB-GPG-KEY-future
It looks like all the effort is going into moving to puppet-core right now so there might not be another update here.

We are going to set $manage_repo to false and add the repo ourselves to buy us some time.

It would be good if we could get a simple release that just updates that key though.

[kenyon]

Pinning to the latest commit also works until there is a release. Example: kenyon/puppet@d133791

[bmcnally-uw]

It does look like this issue has been fixed in newer versions of puppetlabs/puppetlabs-puppet_agent.