安装提供程序时出错 "aws":openpgp:未知实体制作的签名

Error installing provider "aws": openpgp: signature made by unknown entity

我正在使用 terraform 版本 0.11.13,今天下午我在 terraform init 步骤中收到以下错误 这是否意味着我必须升级 terraform 版本,是否已弃用 aws 提供商的此版本?

完整日志:

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.

[1mInitializing provider plugins...
- Checking for available provider plugins on https://releases.hashicorp.com...

Error installing provider "aws": openpgp: signature made by unknown entity.

Terraform analyses the configuration and state and automatically downloads
plugins for the providers used. However, when attempting to download this
plugin an unexpected error occured.

This may be caused if for some reason Terraform is unable to reach the
plugin repository. The repository may be unreachable if access is blocked
by a firewall.

If automatic installation is not possible or desirable in your environment,
you may alternatively manually install plugins by downloading a suitable
distribution package and placing the plugin's executable file in the
following directory:
    terraform.d/plugins/linux_amd64

用于发布签名和验证的 GPG 密钥已轮换。 Terraform 的新版本使用这个更新的密钥来验证官方提供者,官方提供者版本将使用这个密钥进行签名。

More about

修复提供程序版本解决了问题。

HashiCorp 已轮换其发布签名密钥作为 HCSEC-2021-12

的一部分

例如,对于 terraform 0.11.x,您可以将 aws 版本设置为 v2.70.0

provider "aws" {
  region  = "us-east-1"
  version = "v2.70.0"
}

其他版本可以查看:https://registry.terraform.io/providers/hashicorp/aws/latest/docs

Important - While this answer can solve the immediate problem, it creates a potential security risk by disabling the security check. Use with caution

你也可以

terraform init -verify-plugins=false

这对我有用。

Hashicorp 拥有 re-signed with a new GPG key as part of a internal security ticket

为了解决这个问题,考虑转向新版本的 Terraform - 这已在 0.11.15 中修复,您应该升级到这个版本。这应该不会影响其他任何东西,因为只有很小的变化。