- [IMPROVEMENT] Improvements for APT keys management. See [#351].
- By default, get keys from keys.datadoghq.com, not the Ubuntu keyserver.
- Always add the
DATADOG_APT_KEY_CURRENT.public
key (contains key used to sign current repodata). - Add
signed-by
option to all sources list lines. - On Debian >= 9 and Ubuntu >= 16, only add keys to
/usr/share/keyrings/datadog-archive-keyring.gpg
. - On older systems, also add the same keyring to
/etc/apt/trusted.gpg.d
.
- [BUGFIX] Don't set
repo_gpgcheck=1
by default on RHEL/CentOS 8.1 and on custom repos. See [#352]. - [BUGFIX] Change RPM key URLs to non-SNI versions to ensure the role continues to work with Python <= 2.7.9. See [#353].
- [DOCS] Add a note about installing marketplace integrations. See [#354].