cndi E1008 - TERRAFORM_STATE_PASSPHRASE environment variable is not set

[johnstonmatt]

description

The cndi CLI exits with error code 1008 when it doesn't find a value for the TERRAFORM_STATE_PASSPHRASE environment variable.

CNDI stores your terraform state file in the otherwise empty _state branch of your repository, where it is is encrypted at rest using the AES algorithm, taking your terraform state JSON, and your TERRAFORM_STATE_PASSPHRASE as input to the encryption operation.

It's this secret value that CNDI is unable to find.

resolution tips

This issue can be challenging to remedy if you can't recover the original key passphrase used to seal your state.

You should first ensure the TERRAFORM_STATE_PASSPHRASE env var is present in the environment where you are running your cndi command. It should be available wherever you ran the command, from your local machine or from GitHub Actions.