Why am I seeing a GPG key expired warning for the Spacelift provider during OpenTofu initialization?

Last updated: June 23, 2026

Context

When running an OpenTofu stack on Spacelift, you may notice a warning during the provider initialization phase related to the Spacelift provider's GPG key being expired. This warning appears in the run logs during the initialization step.

Answer

This warning is a known issue in OpenTofu version 1.9 and has been resolved in OpenTofu version 1.10 and above. You can find more details about the underlying issue in the OpenTofu GitHub issue tracker: https://github.com/opentofu/opentofu/issues/2475.

To resolve the warning, upgrade your OpenTofu version to 1.10 or later:

  1. Update the OpenTofu version used by your Spacelift stack to 1.10+.

  2. Trigger a new run on the stack.

  3. Verify that the GPG key expired warning no longer appears in the initialization logs.

After upgrading, the provider initialization should complete without any GPG key warnings.