Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OpenTofu registry is missing GPG keys for this provider #969

Open
pascal-hofmann opened this issue May 29, 2024 · 0 comments
Open

OpenTofu registry is missing GPG keys for this provider #969

pascal-hofmann opened this issue May 29, 2024 · 0 comments

Comments

@pascal-hofmann
Copy link
Contributor

First of all thank you for all the work you put into this provider!

I noticed the public GPG key of this provider is missing in the OpenTofu module registry.

Note: For security reasons, it has to be submitted by the provider author for the OpenTofu registry to accept it.

You can follow this link to submit it: Submit new Provider Signing Key

If you don't have access to the public key anymore, it can be extracted from the terraform registry:

curl 'https://registry.terraform.io/v1/providers/mrparkers/keycloak/4.4.0/download/linux/amd64' | jq --raw-output '.signing_keys | .gpg_public_keys | .[0] | .ascii_armor'

I attached the key for reference:
keycloak_registry_key.pub.txt

Background

  • OpenTofu is a fork of Terraform that is open-source, community-driven, and managed by the Linux Foundation.
  • Hashicorp silently changed the Terms of Service for the terraform provider registry to disallow usage with things other than terraform, so OpenTofu had to build its own registry.

Terraform OpenTofu Version

$ tofu --version
OpenTofu v1.7.1
on darwin_amd64

Expected Behavior

Provider is downloaded and verified.

Actual Behavior

Signature validation was skipped:

- Installed mrparkers/keycloak v4.4.0. Signature validation was skipped due to the registry not containing GPG keys for this provider

Steps to Reproduce

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant