Unable to install MongoDB with this role

[mcdonnnj]

🐛 Summary

This role is currently unable to install MongoDB (3.6) as can be seen in this Actions run: https://github.com/cisagov/ansible-role-mongo/actions/runs/7613233793/job/20732675767#step:8:202. This appears to be a result of the signing key for the apt repository expiring as if you look at https://keyserver.ubuntu.com/pks/lookup?search=2930ADAE8CAF5059EE73BB4B58712A2291FA4AD5&fingerprint=on&op=index you can see that the latest signing key expired on 2023-12-09T16:51:02Z.

To reproduce

Attempt to use this role to install MongoDB. See that it fails.

Expected behavior

MongoDB 3.6 is successfully installed.

Any helpful log output or screenshots

TASK [ansible-role-mongo : Get mongodb-org GPG key] ****************************
fatal: [debian10-systemd]: FAILED! => {"after": ["B7C5D7D6350947F8", "6ED0E7B82643E131", "254CF3B5AEC0A8F0", "BDE6D2B9216EC7A8", "F8D2585B8783D481", "73A4F27B8DD47936", "0E98404D386FA1D9", "A48449044AAD5C5D", "54404762BBB6E853", "605C66F00D6C9793", "DC30D7C23CBBABEE", "648ACFD622F3D138", "4DFAB270CAA96DFA", "112695A0E562B32A", "DCC9EFBF77E11517", "E0B11894F66AEC98", "04EE7237B7D453EC", "EDA0D2388AE22BA9", "AA8E81B4331F7F50", "EF0F382A1A7B6500"], "before": ["B7C5D7D6350947F8", "6ED0E7B82643E131", "254CF3B5AEC0A8F0", "BDE6D2B9216EC7A8", "F8D2585B8783D481", "73A4F27B8DD47936", "0E98404D386FA1D9", "A48449044AAD5C5D", "54404762BBB6E853", "605C66F00D6C9793", "DC30D7C23CBBABEE", "648ACFD622F3D138", "4DFAB270CAA96DFA", "112695A0E562B32A", "DCC9EFBF77E11517", "E0B11894F66AEC98", "04EE7237B7D453EC", "EDA0D2388AE22BA9", "AA8E81B4331F7F50", "EF0F382A1A7B6500"], "changed": true, "fp": "58712A2291FA4AD5", "id": "2930ADAE8CAF5059EE73BB4B58712A2291FA4AD5", "key_id": "2930ADAE8CAF5059EE73BB4B58712A2291FA4AD5", "msg": "apt-key did not return an error, but failed to add the key (check that the id is correct and *not* a subkey)", "short_id": "91FA4AD5"}

[mcdonnnj]

I believe the only options to install this version of MongoDB now is to download a deb from the release archive and install with dpkg or to explicitly trust the source with the trusted option but that has security implications I don't know that we're comfortable with per https://manpages.debian.org/bookworm/apt/sources.list.5.en.html#:~:text=Trusted%20(trusted) (Note that Firefox does not support URL text fragments)