cndi E1000 - failed to pull decrypt tfstate

[johnstonmatt]

description

The cndi CLI exits with error code 1000 when it attempts to decrypt your terraform.tfstate.encrypted file from your _state branch.

CNDI stores your terraform state file in the otherwise empty _state branch of your repository, where it is is encrypted at rest using the AES algorithm, taking your terraform state JSON, and your TERRAFORM_STATE_PASSPHRASE as input to the encryption operation.

If your decryption is failing it is likely that your state was previously encrypted with a different passphrase.

resolution tips

This issue can be challenging to remedy if you can't recover the original key passphrase used to seal your state.

You should first check to see if the TERRAFORM_STATE_PASSPHRASE env var is missing or incorrect in the environment where you are running your cndi command.