Cannot add archive signature key for custom archives

[Ante Karamatić]

All OpenStack related charms (with the exception of Ceph charms) do not allow adding custom key for openstack-origin. If openstack-origin is set to 'deb url source entry' (which is supported), then adding a key should also be possible.

Feature should support passing ASCII armor version of the key and not only key name, which would later be fetched from keyserver. This will allow using charms in environment without Internet or proxy access.

Example of a working charm is 'ceph' charm which uses 'add_source()' to get the source and key. It supports keys in multiple formats.

[James Page (james-page)]

You should be able to use the following format:

   'deb url source entry|keyid'

The configuration of the install source will split in '|' and assuming the second part is the key id to import.

[Nobuto Murata (nobuto)]

Seems like at least adding a key with key id is supported by openstack-origin='deb url...|KEY_ID'.
https://bugs.launchpad.net/charms/+source/keystone/+bug/1503440/comments/1

[James Page (james-page)]

But this does not support injecting the key directly from configuration.

[Ante Karamatić (ivoks)]

Yes, adding '|key' is supported, but undocumented. However, requested feature is custom key without internet/proxy access.

[Ryan Beisner (1chb1n)]

FYI, we have a bug raised for the "need-to-document key usage" topic:
https://bugs.launchpad.net/charms/+source/keystone/+bug/1503440