Context

When using the default Spacelift runner image (public.ecr.aws/spacelift/runner-terraform:latest), which is Alpine (musl libc) based, some Terraform providers that require glibc — such as the 1Password Terraform provider — will not work correctly.

Answer

Spacelift maintains a dedicated runner image with support for the 1 Password CLI

github.com/spacelift-io/runner-terraform-1password

This repository builds a Docker image based on public.ecr.aws/spacelift/runner-terraform, adding the 1Password CLI (op). The image is automatically updated when new versions of the 1Password CLI are released.