search

launchdarkly / terraform-provider-launchdarkly

Terraform LaunchDarkly provider
https://www.terraform.io/docs/providers/launchdarkly/
Mozilla Public License 2.0
23 stars 24 forks source link

Submit recent GPG key to OpenTofu registry #222

Closed mguillet-payfit closed 3 weeks ago

mguillet-payfit commented 3 weeks ago

The GPG public key signing the provider has been submitted to OpenTofu registry with #221 and https://github.com/opentofu/registry/issues/1215.

However the submitted key is an old one and not the GPG key used since version 2.10.0.

v2.9.2:

➜  curl -s 'https://registry.terraform.io/v1/providers/launchdarkly/launchdarkly/2.9.2/download/linux/amd64' | jq --raw-output '.signing_keys | .gpg_public_keys | .[0] | .ascii_armor' | gpg -
pub   rsa4096 2020-07-30 [SC]
      EE3E8DB9FE983A0CCDA8CB395902D4FCD0383786
uid           Henry Barrow (GPG generated for Terraform provider transfer) <hbarrow@launchdarkly.com>
sub   rsa4096 2020-07-30 [E]

v2.10.0 and later:

➜  curl -s 'https://registry.terraform.io/v1/providers/launchdarkly/launchdarkly/2.10.0/download/linux/amd64' | jq --raw-output '.signing_keys | .gpg_public_keys | .[0] | .ascii_armor' | gpg -
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   rsa4096 2023-02-22 [SC]
      1F9EF64EE33373DD313FFA36F6E8B367CFA9B29C
uid           LaunchDarkly Integrations <integrations@launchdarkly.com>
sub   rsa4096 2023-02-22 [E]

➜  curl -s 'https://registry.terraform.io/v1/providers/launchdarkly/launchdarkly/2.21.0/download/linux/amd64' | jq --raw-output '.signing_keys | .gpg_public_keys | .[0] | .ascii_armor' | gpg -
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   rsa4096 2023-02-22 [SC]
      1F9EF64EE33373DD313FFA36F6E8B367CFA9B29C
uid           LaunchDarkly Integrations <integrations@launchdarkly.com>
sub   rsa4096 2023-02-22 [E]

This issue makes impossible to execute tofu init with the launchdarky provider used with v2.10.0+

Can you submit the current GPG key to OpenTofu registry in replacement of the old one?

mguillet-payfit commented 3 weeks ago

Fyi, In the meantime, OpenTofu reverted the submission https://github.com/opentofu/registry/pull/1224

Yantrio commented 3 weeks ago

Hi, OpenTofu team member here 👋 It is worth noting that you can upload multiple GPG keys and we support that just fine.

mguillet-payfit commented 3 weeks ago

Resolved in https://github.com/launchdarkly/terraform-provider-launchdarkly/issues/221#issuecomment-2446315331