Katello 3.5 rhel7, install fails (complain gpg key)

Problem:

following the install instructions from [1] I try to install foreman-release-scl but it fails with following error:

[root@prov-01 ~]# yum -y install foreman-release-scl python-django
Loaded plugins: product-id, search-disabled-repos, subscription-manager
Package python-django is obsoleted by python2-django, trying to install python2-django-1.6.11.7-1.el7.noarch instead
Resolving Dependencies
--> Running transaction check
---> Package foreman-release-scl.noarch 0:3-1.el7 will be installed
--> Processing Dependency: centos-release-scl for package: foreman-release-scl-3-1.el7.noarch
---> Package python2-django.noarch 0:1.6.11.7-1.el7 will be installed
--> Processing Dependency: python-django-bash-completion = 1.6.11.7-1.el7 for package: python2-django-1.6.11.7-1.el7.noarch
--> Running transaction check
---> Package centos-release-scl.noarch 0:2-2.el7.centos will be installed
--> Processing Dependency: centos-release-scl-rh for package: centos-release-scl-2-2.el7.centos.noarch
---> Package python-django-bash-completion.noarch 0:1.6.11.7-1.el7 will be installed
--> Running transaction check
---> Package centos-release-scl-rh.noarch 0:2-2.el7.centos will be installed
--> Finished Dependency Resolution

Dependencies Resolved

==========================================================================================================
 Package                                Arch            Version                    Repository        Size
==========================================================================================================
Installing:
 foreman-release-scl                    noarch          3-1.el7                    foreman          3.3 k
 python2-django                         noarch          1.6.11.7-1.el7             epel             4.0 M
Installing for dependencies:
 centos-release-scl                     noarch          2-2.el7.centos             foreman           12 k
 centos-release-scl-rh                  noarch          2-2.el7.centos             foreman           12 k
 python-django-bash-completion          noarch          1.6.11.7-1.el7             epel              17 k

Transaction Summary
==========================================================================================================
Install  2 Packages (+3 Dependent packages)

Total download size: 4.0 M
Installed size: 15 M
Downloading packages:
warning: /var/cache/yum/x86_64/7Server/foreman/packages/centos-release-scl-2-2.el7.centos.noarch.rpm: Header V3 RSA/SHA256 Signature, key ID f4a80eb5: NOKEY
Public key for centos-release-scl-2-2.el7.centos.noarch.rpm is not installed
(1/5): centos-release-scl-2-2.el7.centos.noarch.rpm                                |  12 kB  00:00:00     
(2/5): centos-release-scl-rh-2-2.el7.centos.noarch.rpm                             |  12 kB  00:00:00     
(3/5): foreman-release-scl-3-1.el7.noarch.rpm                                      | 3.3 kB  00:00:00     
warning: /var/cache/yum/x86_64/7Server/epel/packages/python-django-bash-completion-1.6.11.7-1.el7.noarch.rpm: Header V3 RSA/SHA256 Signature, key ID 352c64e5: NOKEY
Public key for python-django-bash-completion-1.6.11.7-1.el7.noarch.rpm is not installed
(4/5): python-django-bash-completion-1.6.11.7-1.el7.noarch.rpm                     |  17 kB  00:00:00     
(5/5): python2-django-1.6.11.7-1.el7.noarch.rpm                                    | 4.0 MB  00:00:01     
----------------------------------------------------------------------------------------------------------
Total                                                                     2.1 MB/s | 4.0 MB  00:00:01     
Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7
Importing GPG key 0x352C64E5:
 Userid     : "Fedora EPEL (7) <epel@fedoraproject.org>"
 Fingerprint: 91e9 7d7c 4a5e 96f1 7f3e 888f 6a2f aea2 352c 64e5
 Package    : epel-release-7-11.noarch (installed)
 From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7
warning: /var/cache/yum/x86_64/7Server/foreman/packages/foreman-release-scl-3-1.el7.noarch.rpm: Header V4 RSA/SHA256 Signature, key ID 897740e9: NOKEY
Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-foreman
Importing GPG key 0x897740E9:
 Userid     : "Foreman Release Signing Key (1.16) <packages@theforeman.org>"
 Fingerprint: 41ee 8815 a84c aca4 a583 5055 9c21 bcb2 8977 40e9
 Package    : foreman-release-1.16.1-1.el7.noarch (installed)
 From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-foreman
Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-foreman


The GPG keys listed for the "Foreman 1.16" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.


 Failing package is: centos-release-scl-rh-2-2.el7.centos.noarch
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-foreman

[root@prov-01 ~]# 

[1] Foreman :: Plugin Manuals

Expected outcome:

Foreman and Proxy versions:

  • foreman: 1.16
  • katello: 3.5

Foreman and Proxy plugin versions:

Other relevant data:
[e.g. logs from Foreman and/or the Proxy, modified templates, commands issued, etc]