Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

GPG Key Expired #2481

Closed
DemonICOLI opened this issue Oct 5, 2023 · 8 comments
Closed

GPG Key Expired #2481

DemonICOLI opened this issue Oct 5, 2023 · 8 comments

Comments

@DemonICOLI
Copy link

DemonICOLI commented Oct 5, 2023

Hi there,

I'm unable to install the terraform providers as it seems the gpg key is expired:

Error: Failed to install provider Error while installing newrelic/newrelic v3.17.0: error checking signature: openpgp: key expired

@DemonICOLI
Copy link
Author

Seems to be only present on old versions of the provider

@marshall-kiruba-selwyn
Copy link

marshall-kiruba-selwyn commented Oct 5, 2023

We are also facing this issue. Till 3.20 version, this issue is there. From 3.21 version it is working normally.

@DemonICOLI
Copy link
Author

I can confirm it is present on 3.17 & 3.18

@rthorn-nr
Copy link

Hi @DemonICOLI , can I confirm with you whether you're using TF version 1.6.0?

Similar issues are starting to pop up since the new TF version was released yesterday:

hashicorp/terraform#33984
vmware/terraform-provider-vra#506
vmware/terraform-provider-wavefront#126

For the time being, I was able to get around this issue two ways: if you want to stay on 3.17, you can downgrade to TF 1.5.7. Alternatively, you can upgrade your provider version. Thanks @marshall-kiruba-selwyn for confirming that this is working starting in 3.21

@DemonICOLI
Copy link
Author

DemonICOLI commented Oct 7, 2023

Hey @rthorn-nr ,

I can confirm the version we are using is 1.6.0, as is the one installed by default by hashicorp/setup-terraform@v2 as of today.

A workaround is indeed either upgrading the provider to 1.21+ or downgrade the terraform version.

is it possible to keep the key updated in the registry as suggested here ? otherwise, we can wait for 1.6.1 as it may include a fix restoring the old key checking behaviour

@pranav-new-relic
Copy link
Member

Hey everyone, looks like Terraform v1.6.1 is out, which includes a fix to this bug.

cli: Reverted back to previous behavior of ignoring signing key expiration for provider installation, since it's the provider registry's responsibility to verify key validity at publication time. [https://github.com/hashicorp/terraform/pull/34004]

I've tried terraform init -upgrade ing to multiple versions of the New Relic Terraform Provider <3.20.0 and this works with no error.

Can you all please try too, and confirm if things are now fine with Terraform v1.6.1? Thanks!

@rthorn-nr
Copy link

Thanks @pranav-new-relic , I confirmed that I'm able to use v1.6.1 to install v3.17 🎉

@DemonICOLI are you unblocked with v1.6.1?

@DemonICOLI
Copy link
Author

I can confirm that 1.6.1 does indeed works.

Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants