flake: TestInstall

[flake-investigator]

CI Run: https://github.com/coder/coder/actions/runs/24642813772
Commit: 5f6c74adfa743650bcb05fb67ca56d75b696e2be (Jake Howell)

Summary

• Job: test-go-pg-17 (also test-go-pg ubuntu-latest)
• Package: github.com/coder/coder/v2/provisioner/terraform
• Failing test: TestInstall
• Root cause classification: Infrastructure / dependency (HashiCorp signature key expired)

Error evidence

=== FAIL: provisioner/terraform TestInstall (0.73s)
install_test.go:147:
    Error:      Received unexpected error:
                install:
                    github.com/coder/coder/v2/provisioner/terraform.Install
                        /home/runner/work/coder/coder/provisioner/terraform/install.go:108
                  - unable to verify checksums signature: openpgp: key expired
Test:       TestInstall

Why this is happening

• TestInstall uses hc-install (releases.ExactVersion) to verify HashiCorp release checksums via GPG signature.
• The HashiCorp signing key used for terraform_1.14.5_SHA256SUMS appears to be expired, causing signature verification to fail.
• This is deterministic across Linux test jobs in this run, not a timing flake.

Precise assignment analysis

• Test function: provisioner/terraform/install_test.go::TestInstall
• Recent file history (git log --oneline -10 --follow provisioner/terraform/install_test.go):
  • b04e6870 chore: upgrade bundled terraform binary version (#21092) (Jakub Domeracki)
  • 158243d fix: add cache for terraform installer files (#20776) (Paweł Banaszewski)
• Most recent meaningful change to the test file is b04e6870; assigning to @jdomeracki-coder for triage.

Related issues

• flake: TestInstall (provisioner/terraform) on macOS arm64 #1126 (different root cause: missing darwin/arm64 artifacts)
• test flake: TestInstall reaches out over the internet #72 (different root cause: external network timeout)

Reproduction

• go test ./provisioner/terraform -run TestInstall

[ethanndickson]

Temporary fix is up, bug in hc-install is the cause.

[ethanndickson]

Opened ENG-2496 to undo the go mod replace.

[MattAlp]

Appears it has yet to propagate to the local install workflow; attempted a fresh setup just now via Homebrew and am seeing this issue.