OpenTofu experienced a minor incident on August 13, 2025 affecting OpenTofu Registry (Provider Registry) and OpenTofu Registry (Module Registry), lasting 2h 6m. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- investigating Aug 13, 2025, 10:35 AM UTC
We've identified an issue where the OpenTofu Registry may be incorrectly rate limiting some users. This manifests as an error stating "host registry.opentofu.org requires authentication credentials" when downloading providers when using OpenTofu. Related issue: https://github.com/opentofu/registry/issues/2614
- resolved Aug 13, 2025, 12:41 PM UTC
We have taken steps to disable the rate limiting rule that was mistakenly firing and we are hearing reports that this issue is now resolved. We have opened a ticket with cloudflare to investigate further about why this rate limiting request was being fired, we will provide an update when we have more information.