Terraform GPG Certificate Rotation

Incident Report for StrongDM

Resolved

Hashicorp has rotated its GPG certificates in order to remediate a potential breach of its systems. As a result, strongDM's Terraform provider signatures were invalidated. We have updated the certificate and released a new version. To inherit these changes, you will need to complete the following steps:

In the Required Provider's block, update the minimum version to: "1.0.21" as seen below:
Once you complete this step, run terraform init before running any form of terraform plan or terraform apply:

terraform {
required_providers {
sdm = {
source = "strongdm/sdm"
version = "1.0.21"
}
}
}
provider "sdm" {
# Configuration options
}

Our Support team is standing by to help troubleshoot if any questions come up.

Posted Apr 28, 2021 - 14:00 UTC