During update of Gitlab CE, the following message popped up
The GPG keys listed for the "gitlab_gitlab-ce" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.. Failing package is: gitlab-ce-17.11.7-ce.0.el8.x86_64
Turns out, the repository has two GPG keys now. Gitlab provides a script that installed the missing key and is idempotent.
curl -sS https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/script.rpm.sh | sudo bash