Add nodesource GPG key to repo

Nodesource has recently changed to distribution via CloudFront which requires SNI (see nodesource/distributions#353 (comment)), which looks like it causes issues because the full URL (https://deb.nodesource.com/gpgkey/nodesource.gpg.key) has a valid certificate, but the root URL now redirects to GitHub (https://deb.nodesource.com)

It looks like Ansible does certificate validation of the root URL, not the full path, and is detecting a problem with the hostname change.

This PR removes the download of the key from github, and instaed adds the GPG key for nodesource explicitly in a file, as suggested here: nodesource/ansible-nodejs-role#33 (comment)

Author: TheDoubleK

playbooks/roles/jenkins/files/nodesource.gpg.key

@@ -0,0 +1,47 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: SKS 1.1.5
+Comment: Hostname: keyserver.ubuntu.com
+
+mQINBFObJLYBEADkFW8HMjsoYRJQ4nCYC/6Eh0yLWHWfCh+/9ZSIj4w/pOe2V6V+W6DHY3kK
+3a+2bxrax9EqKe7uxkSKf95gfns+I9+R+RJfRpb1qvljURr54y35IZgsfMG22Np+TmM2RLgd
+FCZa18h0+RbH9i0b+ZrB9XPZmLb/h9ou7SowGqQ3wwOtT3Vyqmif0A2GCcjFTqWW6TXaY8eZ
+J9BCEqW3k/0Cjw7K/mSy/utxYiUIvZNKgaG/P8U789QyvxeRxAf93YFAVzMXhoKxu12IuH4V
+nSwAfb8gQyxKRyiGOUwk0YoBPpqRnMmDDl7SdmY3oQHEJzBelTMjTM8AjbB9mWoPBX5G8t4u
+47/FZ6PgdfmRg9hsKXhkLJc7C1btblOHNgDx19fzASWX+xOjZiKpP6MkEEzq1bilUFul6RDt
+xkTWsTa5TGixgCB/G2fK8I9JL/yQhDc6OGY9mjPOxMb5PgUlT8ox3v8wt25erWj9z30QoEBw
+fSg4tzLcJq6N/iepQemNfo6Is+TG+JzI6vhXjlsBm/Xmz0ZiFPPObAH/vGCY5I6886vXQ7ft
+qWHYHT8jz/R4tigMGC+tvZ/kcmYBsLCCI5uSEP6JJRQQhHrCvOX0UaytItfsQfLmEYRd2F72
+o1yGh3yvWWfDIBXRmaBuIGXGpajC0JyBGSOWb9UxMNZY/2LJEwARAQABtB9Ob2RlU291cmNl
+IDxncGdAbm9kZXNvdXJjZS5jb20+iQI4BBMBAgAiBQJTmyS2AhsDBgsJCAcDAgYVCAIJCgsE
+FgIDAQIeAQIXgAAKCRAWVaCraFdigHTmD/9OKhUyjJ+h8gMRg6ri5EQxOExccSRU0i7UHkte
+cSs0DVC4lZG9AOzBe+Q36cym5Z1di6JQkHl69q3zBdV3KTW+H1pdmnZlebYGz8paG9iQ/wS9
+gpnSeEyx0Enyi167Bzm0O4A1GK0prkLnz/yROHHEfHjsTgMvFwAnf9uaxwWgE1d1RitIWgJp
+Anp1DZ5O0uVlsPPmXAhuBJ32mU8S5BezPTuJJICwBlLYECGb1Y65Cil4OALU7T7sbUqfLCua
+RKxuPtcUVnJ6/qiyPygvKZWhV6Od0Yxlyed1kftMJyYoL8kPHfeHJ+vIyt0s7cropfiwXoka
+1iJB5nKyt/eqMnPQ9aRpqkm9ABS/r7AauMA/9RALudQRHBdWIzfIg0Mlqb52yyTIIgQJHNGN
+X1T3z1XgZhI+Vi8SLFFSh8x9FeUZC6YJu0VXXj5iz+eZmk/nYjUt4MtcpVsVYIB7oIDIbImO
+Dm8ggsgrIzqxOzQVP1zsCGek5U6QFc9GYrQ+Wv3/fG8hfkDnxXLww0OGaEQxfodm8cLFZ5b8
+JaG3+Yxfe7JkNclwvRimvlAjqIiW5OK0vvfHco+YgANhQrlMnTx//IdZssaxvYytSHpPZTYw
++qPEjbBJOLpoLrz8ZafN1uekpAqQjffIAOqW9SdIzq/kSHgl0bzWbPJPw86XzzftewjKNbkC
+DQRTmyS2ARAAxSSdQi+WpPQZfOflkx9sYJa0cWzLl2w++FQnZ1Pn5F09D/kPMNh4qOsyvXWl
+ekaV/SseDZtVziHJKm6V8TBG3flmFlC3DWQfNNFwn5+pWSB8WHG4bTA5RyYEEYfpbekMtdoW
+W/Ro8Kmh41nuxZDSuBJhDeFIp0ccnN2Lp1o6XfIeDYPegyEPSSZqrudfqLrSZhStDlJgXjea
+JjW6UP6txPtYaaila9/Hn6vF87AQ5bR2dEWB/xRJzgNwRiax7KSU0xca6xAuf+TDxCjZ5pp2
+JwdCjquXLTmUnbIZ9LGV54UZ/MeiG8yVu6pxbiGnXo4Ekbk6xgi1ewLivGmz4QRfVklV0dba
+3Zj0fRozfZ22qUHxCfDM7ad0eBXMFmHiN8hg3IUHTO+UdlX/aH3gADFAvSVDv0v8t6dGc6XE
+9Dr7mGEFnQMHO4zhM1HaS2Nh0TiL2tFLttLbfG5oQlxCfXX9/nasj3K9qnlEg9G3+4T7lpdP
+mZRRe1O8cHCI5imVg6cLIiBLPO16e0fKyHIgYswLdrJFfaHNYM/SWJxHpX795zn+iCwyvZSl
+LfH9mlegOeVmj9cyhN/VOmS3QRhlYXoA2z7WZTNoC6iAIlyIpMTcZr+ntaGVtFOLS6fwdBqD
+XjmSQu66mDKwU5EkfNlbyrpzZMyFCDWEYo4AIR/18aGZBYUAEQEAAYkCHwQYAQIACQUCU5sk
+tgIbDAAKCRAWVaCraFdigIPQEACcYh8rR19wMZZ/hgYv5so6Y1HcJNARuzmffQKozS/rxqec
+0xM3wceL1AIMuGhlXFeGd0wRv/RVzeZjnTGwhN1DnCDy1I66hUTgehONsfVanuP1PZKoL38E
+AxsMzdYgkYH6T9a4wJH/IPt+uuFTFFy3o8TKMvKaJk98+Jsp2X/QuNxhqpcIGaVbtQ1bn7m+
+k5Qe/fz+bFuUeXPivafLLlGc6KbdgMvSW9EVMO7yBy/2JE15ZJgl7lXKLQ31VQPAHT3an5IV
+2C/ie12eEqZWlnCiHV/wT+zhOkSpWdrheWfBT+achR4jDH80AS3F8jo3byQATJb3RoCYUCVc
+3u1ouhNZa5yLgYZ/iZkpk5gKjxHPudFbDdWjbGflN9k17VCf4Z9yAb9QMqHzHwIGXrb7ryFc
+uROMCLLVUp07PrTrRxnO9A/4xxECi0l/BzNxeU1gK88hEaNjIfviPR/h6Gq6KOcNKZ8rVFdw
+FpjbvwHMQBWhrqfuG3KaePvbnObKHXpfIKoAM7X2qfO+IFnLGTPyhFTcrl6vZBTMZTfZiC1X
+DQLuGUndsckuXINIU3DFWzZGr0QrqkuE/jyr7FXeUJj9B7cLo+s/TXo+RaVfi3kOc9BoxIvy
+/qiNGs/TKy2/Ujqp/affmIMoMXSozKmga81JSwkADO1JMgUy6dApXz9kP4EE3g==
+=CLGF
+-----END PGP PUBLIC KEY BLOCK-----

playbooks/roles/jenkins/tasks/tools.yml

@@ -53,9 +53,14 @@
 - name: Add AWS credentials file
   template: src=aws_credentials.j2 dest=/var/lib/jenkins/.aws/credentials
 
-- name: Add NodeJS apt repository key
+- name: Copy the NodeSource GPG key to the remote
+  copy:
+    src: ../files/nodesource.gpg.key
+    dest: /tmp/nodesource.gpg.key
+
+- name: Import the NodeSource GPG key into apt
   apt_key:
-    url: "https://deb.nodesource.com/gpgkey/nodesource.gpg.key"
+    file: /tmp/nodesource.gpg.key
     state: present
 
 - name: Add NodeJS apt repository