You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When we have more than 6 (>=7) sops_file data blocks in tf code the decode(for example when we run terraform plan) fails randomly. The files to decrypt have been encrypted by using sops -e -i <file-name> based on gpg with passphrase. One can think that they typed wrong passphrase but the issue appears randomly and sometime decrypt can succeed. The sops -d <file-name> succeeds always.
By increasing the count of sops_file data blocks the probability of failures also increase, so that for 15 items only 1 from 10 may succeed.
The number 7 maybe fixed or maybe depend on system performance, I tested on Apple MacBook m3 pro (and also on ubuntu linux on local and remote docker based terraform ci/cd pipeline). When we having only few(less than 7) sops_file blocks in tif no failures can be seen.
Tested with latest terraform and sops provider version (same issue also can be seen with old terraform and sops provider versions).
Here is the tools version informations:
# output of `terraform version`
Terraform v1.9.3
on darwin_arm64
+ provider registry.terraform.io/carlpett/sops v1.1.1
Here is sample tf code which can be used to reproduce the issue with 10 sops_file data blocks:
When we have more than 6 (>=7) sops_file data blocks in tf code the decode(for example when we run
terraform plan
) fails randomly. The files to decrypt have been encrypted by usingsops -e -i <file-name>
based on gpg with passphrase. One can think that they typed wrong passphrase but the issue appears randomly and sometime decrypt can succeed. Thesops -d <file-name>
succeeds always.By increasing the count of sops_file data blocks the probability of failures also increase, so that for 15 items only 1 from 10 may succeed.
The number 7 maybe fixed or maybe depend on system performance, I tested on Apple MacBook m3 pro (and also on ubuntu linux on local and remote docker based terraform ci/cd pipeline). When we having only few(less than 7) sops_file blocks in tif no failures can be seen.
Tested with latest terraform and sops provider version (same issue also can be seen with old terraform and sops provider versions).
Here is the tools version informations:
Here is sample tf code which can be used to reproduce the issue with 10 sops_file data blocks:
please let me know if you need more info
The text was updated successfully, but these errors were encountered: