import `for_each` should not be able to reference the import target #36672

realbart · 2025-03-11T12:45:58Z

Terraform Version

4.421.33

Terraform Configuration Files

Starting: Terraform Init
==============================================================================
Task         : Terraform
Description  : Execute terraform commands to manage resources on AzureRM, Amazon Web Services(AWS) and Google Cloud Platform(GCP). v4.241.11
Version      : 4.241.33
Author       : Microsoft Corporation
Help         : [Learn more about this task](https://aka.ms/devlabs/ado/tf/task/v4)
==============================================================================
/agent/_work/_tool/terraform/1.11.1/x64/terraform init -backend-config=storage_account_name=bovmijnrdcdevwestg -backend-config=container_name=mijnrdcdevwetfstatecnt001 -backend-config=key=Bovemij-mijnrdc-Acc-001.tfstate -backend-config=resource_group_name=bov-mijnrdc-dev-we-tf-rg-001 -backend-config=subscription_id=c50e3f67-8b25-43fe-9c07-4a22235ce0d9 -backend-config=tenant_id=ffe07873-d7b0-44f4-bd76-651315816bd1 -backend-config=client_id=*** -backend-config=oidc_token=*** -backend-config=use_oidc=true
Initializing the backend...

Successfully configured the backend "azurerm"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing modules...
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules?ref=36c1c924a6892931f80a12b0fbf7cfc8861c2176 for app_configuration...
- app_configuration in .terraform/modules/app_configuration/general/app_configuration
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules?ref=36c1c924a6892931f80a12b0fbf7cfc8861c2176 for application_insights...
- application_insights in .terraform/modules/application_insights/monitor/app_insights
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules?ref=36c1c924a6892931f80a12b0fbf7cfc8861c2176 for appservice_mijnrdc...
- appservice_mijnrdc in .terraform/modules/appservice_mijnrdc/compute/windows_web_app
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules?ref=36c1c924a6892931f80a12b0fbf7cfc8861c2176 for asp_frontend...
- asp_frontend in .terraform/modules/asp_frontend/compute/service_plan
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules?ref=36c1c924a6892931f80a12b0fbf7cfc8861c2176 for bovemij...
- bovemij in .terraform/modules/bovemij/bovemij
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules?ref=36c1c924a6892931f80a12b0fbf7cfc8861c2176 for key_vault_002...
- key_vault_002 in .terraform/modules/key_vault_002/general/key_vault
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules?ref=36c1c924a6892931f80a12b0fbf7cfc8861c2176 for log_analytics_workspace...
- log_analytics_workspace in .terraform/modules/log_analytics_workspace/monitor/log_analytics_workspace
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules for pe_appcs_001...
- pe_appcs_001 in .terraform/modules/pe_appcs_001/networking/private_endpoint
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules for pe_mijnrdc_app_001...
- pe_mijnrdc_app_001 in .terraform/modules/pe_mijnrdc_app_001/networking/private_endpoint
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules?ref=36c1c924a6892931f80a12b0fbf7cfc8861c2176 for storage_account...
- storage_account in .terraform/modules/storage_account/storage/storage_account
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules?ref=36c1c924a6892931f80a12b0fbf7cfc8861c2176 for storage_account_libs...
- storage_account_libs in .terraform/modules/storage_account_libs/storage/storage_account
Initializing provider plugins...
- Finding hashicorp/azurerm versions matching ">= 3.68.0, >= 3.97.1, 3.117.0, < 4.0.0"...
- Installing hashicorp/azurerm v3.117.0...
- Installed hashicorp/azurerm v3.117.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider

Debug Output

Starting: Terraform Plan
==============================================================================
Task         : Terraform
Description  : Execute terraform commands to manage resources on AzureRM, Amazon Web Services(AWS) and Google Cloud Platform(GCP). v4.241.11
Version      : 4.241.33
Author       : Microsoft Corporation
Help         : [Learn more about this task](https://aka.ms/devlabs/ado/tf/task/v4)
==============================================================================
/agent/_work/_tool/terraform/1.11.1/x64/terraform providers

Providers required by configuration:
.
├── provider[registry.terraform.io/hashicorp/azurerm] 3.117.0
├── module.application_insights
│   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.97.1, < 4.0.0
├── module.appservice_mijnrdc
│   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
├── module.pe_mijnrdc_app_001
│   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
├── module.storage_account_libs
│   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
├── module.asp_frontend
│   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
├── module.key_vault_002
│   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
├── module.log_analytics_workspace
│   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
├── module.bovemij
├── module.pe_appcs_001
│   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
├── module.app_configuration
│   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
└── module.storage_account
    └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0

Providers required by state:

    provider[registry.terraform.io/hashicorp/azurerm]

/agent/_work/_tool/terraform/1.11.1/x64/terraform plan -var-file=variables/acc.tfvars -out=/agent/_work/3/Acceptance.tfplan -input=false -detailed-exitcode
data.azurerm_private_dns_zone.azurewebsites_net: Reading...

Expected Behavior

The resource should have been improted using this code:

resource "azurerm_app_service_custom_hostname_binding" "mijn_staging_rdc_nl" {
  count               = var.web_app_slot_count
  hostname            = "mijn${var.environment_suffix}-staging.rdc.nl"
  app_service_name    = "${module.appservice_mijnrdc.name}/staging"
  resource_group_name = data.azurerm_resource_group.app.name
  ssl_state           = module.bovemij.azurerm_app_service_custom_hostname_binding.ssl_state.sni_enabled
  thumbprint          = data.azurerm_key_vault_certificate.ssl_certificate_staging[0].thumbprint
}

The import:

import {
  for_each = azurerm_app_service_custom_hostname_binding.mijn_staging_rdc_nl
  id = "/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Web/sites/bov-mrdc-acc-mijnrdc-we-app-001/hostNameBindings/mijn-acc-staging.rdc.nl"
  to = azurerm_app_service_custom_hostname_binding.mijn_staging_rdc_nl[each.key]
}

Another way to generate the same error:

import {
  for_each = { for idx, val in azurerm_app_service_custom_hostname_binding.mijn_staging_rdc_nl : idx => val }
  id       = "/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Web/sites/bov-mrdc-acc-mijnrdc-we-app-001/hostNameBindings/mijn-acc-staging.rdc.nl"
  to       = azurerm_app_service_custom_hostname_binding.mijn_staging_rdc_nl[each.key]
}

My initial attampt that generated a differet error:

import {
  #  count = var.web_app_slot_count does not work here
  id       = "/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Web/sites/bov-mrdc-acc-mijnrdc-we-app-001/hostNameBindings/mijn-acc-staging.rdc.nl"
  to       = azurerm_app_service_custom_hostname_binding.mijn_staging_rdc_nl[0]
}

Actual Behavior

My Azure DevOps pipeline failed.

!!!!!!!!!!!!!!!!!!!!!!!!!!! TERRAFORM CRASH !!!!!!!!!!!!!!!!!!!!!!!!!!!!

Terraform crashed! This is always indicative of a bug within Terraform.
Please report the crash with Terraform[1] so that we can fix this.

When reporting bugs, please include your terraform version, the stack trace
shown below, and any additional information which may help replicate the issue.

[1]: https://github.com/hashicorp/terraform/issues

!!!!!!!!!!!!!!!!!!!!!!!!!!! TERRAFORM CRASH !!!!!!!!!!!!!!!!!!!!!!!!!!!!

Note:
My initial import yielded a different error:

data.azurerm_key_vault.ssl_certificate_keyvault: Read complete after 2s [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-infra-rg-001/providers/Microsoft.KeyVault/vaults/bov-mrdc-acc-we-kv-001]
data.azurerm_key_vault_certificate.ssl_certificate: Reading...
data.azurerm_key_vault_certificate.ssl_certificate: Read complete after 0s [id=https://bov-mrdc-acc-we-kv-001.vault.azure.net/certificates/mijn-acc-rdc-nl/60cb2e0d5c51406a8702dda18c1bb269]
azurerm_app_service_custom_hostname_binding.mijn_rdc_nl: Preparing import... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Web/sites/bov-mrdc-acc-mijnrdc-we-app-001/hostNameBindings/mijn-acc.rdc.nl]
azurerm_role_assignment.storage_blob_data_contributor_app: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Storage/storageAccounts/bovmijnrdcaccwestg001/providers/Microsoft.Authorization/roleAssignments/91eac5d9-885a-4e7a-f9ea-742e9038c2ab]
module.key_vault_002.azurerm_key_vault_access_policy.access_policy["bov_mijnrdc_devops_tf_sc"]: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.KeyVault/vaults/bov-mrdc-acc-we-kv-002/objectId/ea163101-fa9a-423f-8349-0f005a2f0ffb]
module.key_vault_002.azurerm_key_vault_access_policy.access_policy["sub_bovemij_mijnrdc_infra_grp"]: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.KeyVault/vaults/bov-mrdc-acc-we-kv-002/objectId/f267c909-2b09-456a-a255-3781c01e1cf4]
azurerm_role_assignment.storage_table_data_contributor_app: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Storage/storageAccounts/bovmijnrdcaccwestg001/providers/Microsoft.Authorization/roleAssignments/4f4e05f7-8978-c599-a26e-23e12c061f4c]
azurerm_app_service_custom_hostname_binding.mijn_rdc_nl: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Web/sites/bov-mrdc-acc-mijnrdc-we-app-001/hostNameBindings/mijn-acc.rdc.nl]
module.pe_mijnrdc_app_001.azurerm_private_endpoint.private_endpoints: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Network/privateEndpoints/bov-mijnrdc-acc-mijnrdc-app-001-we-pep-001]
azurerm_role_assignment.app_configuration_data_reader_app: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.AppConfiguration/configurationStores/bov-mijnrdc-acc-we-appcs-001/providers/Microsoft.Authorization/roleAssignments/b2e9bf2c-7be9-0290-9aa5-f7e15fc72263]
module.key_vault_002.azurerm_key_vault_access_policy.access_policy["appservice_mijnrdc"]: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.KeyVault/vaults/bov-mrdc-acc-we-kv-002/objectId/57b2d97b-e869-4d37-90ea-bb2714972646]

Terraform planned the following actions, but then encountered a problem:

  # azurerm_app_service_custom_hostname_binding.mijn_rdc_nl will be imported
    resource "azurerm_app_service_custom_hostname_binding" "mijn_rdc_nl" {
        app_service_name    = "bov-mrdc-acc-mijnrdc-we-app-001"
        hostname            = "mijn-acc.rdc.nl"
        id                  = "/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Web/sites/bov-mrdc-acc-mijnrdc-we-app-001/hostNameBindings/mijn-acc.rdc.nl"
        resource_group_name = "bov-mijnrdc-acc-we-app-rg-001"
        ssl_state           = "SniEnabled"
        thumbprint          = "BEF32A2749FF6C568B72D358561798AE6FC05186"
        virtual_ip          = null
    }

Plan: 1 to import, 0 to add, 0 to change, 0 to destroy.
╷
│ Error: Configuration for import target does not exist
│ 
│ The configuration for the given import
│ azurerm_app_service_custom_hostname_binding.mijn_staging_rdc_nl[0] does not
│ exist. All target instances must have an associated configuration to be
│ imported.
╵

##[warning]Can't find loc string for key: TerraformPlanFailed
##[error]Error: TerraformPlanFailed 1
Finishing: Terraform Plan

Steps to Reproduce

Terraform

resource "azurerm_app_service_custom_hostname_binding" "mijn_staging_rdc_nl" {
  count               = var.web_app_slot_count
  hostname            = "mijn${var.environment_suffix}-staging.rdc.nl"
  app_service_name    = "${module.appservice_mijnrdc.name}/staging"
  resource_group_name = data.azurerm_resource_group.app.name
  ssl_state           = module.bovemij.azurerm_app_service_custom_hostname_binding.ssl_state.sni_enabled
  thumbprint          = data.azurerm_key_vault_certificate.ssl_certificate_staging[0].thumbprint
}

import {
  for_each = azurerm_app_service_custom_hostname_binding.mijn_staging_rdc_nl
  id = "/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Web/sites/bov-mrdc-acc-mijnrdc-we-app-001/hostNameBindings/mijn-acc-staging.rdc.nl"
  to = azurerm_app_service_custom_hostname_binding.mijn_staging_rdc_nl[each.key]
}
```


2. Pipeline (Azure DevOps, Yaml)
```
            - task: TerraformTaskV4@4
              displayName: 'Terraform Init'
              inputs:
                workingDirectory: Terraform
                backendServiceArm: ${{ parameters.backendServiceArm }}
                backendAzureRmResourceGroupName: ${{ parameters.backendAzureRmResourceGroupName }}
                backendAzureRmStorageAccountName: ${{ parameters.backendAzureRmStorageAccountName }}
                backendAzureRmContainerName: ${{ parameters.backendAzureRmContainerName }}
                backendAzureRmKey: ${{ parameters.backendAzureRmKey }}

            - task: TerraformTaskV4@4
              displayName: 'Terraform Apply'
              inputs:
                provider: 'azurerm'
                command: 'apply'
                commandOptions: '-input=false $(Pipeline.Workspace)/${{ parameters.environmentName }}.tfplan'
                workingDirectory: Terraform
                environmentServiceNameAzureRM: ${{ parameters.environmentServiceNameAzureRM }}
```


### Additional Context

Running through Azure Devops Pipeline

```
            - task: TerraformTaskV4@4
              displayName: 'Terraform Init'
              inputs:
                workingDirectory: Terraform
                backendServiceArm: ${{ parameters.backendServiceArm }}
                backendAzureRmResourceGroupName: ${{ parameters.backendAzureRmResourceGroupName }}
                backendAzureRmStorageAccountName: ${{ parameters.backendAzureRmStorageAccountName }}
                backendAzureRmContainerName: ${{ parameters.backendAzureRmContainerName }}
                backendAzureRmKey: ${{ parameters.backendAzureRmKey }}

            - task: TerraformTaskV4@4
              displayName: 'Terraform Apply'
              inputs:
                provider: 'azurerm'
                command: 'apply'
                commandOptions: '-input=false $(Pipeline.Workspace)/${{ parameters.environmentName }}.tfplan'
                workingDirectory: Terraform
                environmentServiceNameAzureRM: ${{ parameters.environmentServiceNameAzureRM }}
```

### References

_No response_

### Generative AI / LLM assisted development?

CoPilot

The text was updated successfully, but these errors were encountered:

dbanck · 2025-03-11T13:00:09Z

Hi @realbart,

Thanks for filing the issue. Can you please check if there is any additional output after the !!!!!!!!!!!!!!!!!!!!!!!!!!! TERRAFORM CRASH !!!!!!!!!!!!!!!!!!!!!!!!!!!! message? There should be an error message and a stack trace. Having both will make debugging this issue much easier.

realbart · 2025-03-11T15:52:44Z

Hi @dbanck

I'm sorry. I don't know why my entry was trucated (I put it in "Debug Output")
Here another attempt:


2025-03-11T09:45:53.3728790Z ##[section]Starting: Terraform Plan
2025-03-11T09:45:53.3736297Z ==============================================================================
2025-03-11T09:45:53.3736477Z Task         : Terraform
2025-03-11T09:45:53.3736794Z Description  : Execute terraform commands to manage resources on AzureRM, Amazon Web Services(AWS) and Google Cloud Platform(GCP). v4.241.11
2025-03-11T09:45:53.3737012Z Version      : 4.241.33
2025-03-11T09:45:53.3737224Z Author       : Microsoft Corporation
2025-03-11T09:45:53.3737344Z Help         : [Learn more about this task](https://aka.ms/devlabs/ado/tf/task/v4)
2025-03-11T09:45:53.3737495Z ==============================================================================
2025-03-11T09:45:53.9166537Z [command]/agent/_work/_tool/terraform/1.11.1/x64/terraform providers
2025-03-11T09:45:55.8018717Z 
2025-03-11T09:45:55.8019696Z Providers required by configuration:
2025-03-11T09:45:55.8020148Z .
2025-03-11T09:45:55.8020856Z ├── provider[registry.terraform.io/hashicorp/azurerm] 3.117.0
2025-03-11T09:45:55.8021434Z ├── module.application_insights
2025-03-11T09:45:55.8022007Z │   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.97.1, < 4.0.0
2025-03-11T09:45:55.8022507Z ├── module.appservice_mijnrdc
2025-03-11T09:45:55.8023177Z │   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
2025-03-11T09:45:55.8023675Z ├── module.pe_mijnrdc_app_001
2025-03-11T09:45:55.8024228Z │   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
2025-03-11T09:45:55.8024730Z ├── module.storage_account_libs
2025-03-11T09:45:55.8025285Z │   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
2025-03-11T09:45:55.8025767Z ├── module.asp_frontend
2025-03-11T09:45:55.8026316Z │   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
2025-03-11T09:45:55.8026806Z ├── module.key_vault_002
2025-03-11T09:45:55.8027366Z │   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
2025-03-11T09:45:55.8027913Z ├── module.log_analytics_workspace
2025-03-11T09:45:55.8028610Z │   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
2025-03-11T09:45:55.8029256Z ├── module.bovemij
2025-03-11T09:45:55.8029720Z ├── module.pe_appcs_001
2025-03-11T09:45:55.8030287Z │   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
2025-03-11T09:45:55.8030873Z ├── module.app_configuration
2025-03-11T09:45:55.8031456Z │   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
2025-03-11T09:45:55.8031941Z └── module.storage_account
2025-03-11T09:45:55.8032518Z     └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
2025-03-11T09:45:55.8032911Z 
2025-03-11T09:45:55.8033299Z Providers required by state:
2025-03-11T09:45:55.8033602Z 
2025-03-11T09:45:55.8033987Z     provider[registry.terraform.io/hashicorp/azurerm]
2025-03-11T09:45:55.8034341Z 
2025-03-11T09:45:55.8040459Z [command]/agent/_work/_tool/terraform/1.11.1/x64/terraform plan -var-file=variables/acc.tfvars -out=/agent/_work/3/Acceptance.tfplan -input=false -detailed-exitcode
2025-03-11T09:46:00.8855715Z �[0m�[1mdata.azurerm_private_dns_zone.azurewebsites_net: Reading...�[0m�[0m
2025-03-11T09:46:00.8871330Z �[0m�[1mdata.azurerm_private_dns_zone.azconfig_io: Reading...�[0m�[0m
2025-03-11T09:46:01.0458108Z �[0m�[1mdata.azurerm_private_dns_zone.azurewebsites_net: Read complete after 0s [id=/subscriptions/b4966d0c-b0c3-409f-bc72-74f0f110b84d/resourceGroups/bov-idtprod-we-infra-rg-001/providers/Microsoft.Network/privateDnsZones/privatelink.azurewebsites.net]�[0m
2025-03-11T09:46:01.2259443Z �[0m�[1mdata.azurerm_resource_group.infra: Reading...�[0m�[0m
2025-03-11T09:46:01.2260245Z �[0m�[1mdata.azurerm_subnet.pep: Reading...�[0m�[0m
2025-03-11T09:46:01.2261279Z �[0m�[1mdata.azurerm_subscription.current: Reading...�[0m�[0m
2025-03-11T09:46:01.2261834Z �[0m�[1mdata.azurerm_resource_group.app: Reading...�[0m�[0m
2025-03-11T09:46:01.2264270Z �[0m�[1mdata.azurerm_subnet.app: Reading...�[0m�[0m
2025-03-11T09:46:01.2264707Z �[0m�[1mmodule.key_vault_002.data.azurerm_client_config.current: Reading...�[0m�[0m
2025-03-11T09:46:01.2265501Z �[0m�[1mdata.azurerm_key_vault.ssl_certificate_keyvault: Reading...�[0m�[0m
2025-03-11T09:46:01.2348749Z �[0m�[1mmodule.key_vault_002.data.azurerm_client_config.current: Read complete after 0s [id=Y2xpZW50Q29uZmlncy9jbGllbnRJZD1jNDIyZmU0ZS1lNTgzLTQxMzYtODg2Yy1iNmI4Zjg1NzRlNWI7b2JqZWN0SWQ9ZWExNjMxMDEtZmE5YS00MjNmLTgzNDktMGYwMDVhMmYwZmZiO3N1YnNjcmlwdGlvbklkPTcwYTc4MTQ0LTEzM2MtNGI0OS1hMmUyLThkY2U0NmNmYzMyNTt0ZW5hbnRJZD1mZmUwNzg3My1kN2IwLTQ0ZjQtYmQ3Ni02NTEzMTU4MTZiZDE=]�[0m
2025-03-11T09:46:01.2881699Z �[0m�[1mdata.azurerm_resource_group.app: Read complete after 0s [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001]�[0m
2025-03-11T09:46:01.2902226Z �[0m�[1mdata.azurerm_resource_group.infra: Read complete after 0s [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-infra-rg-001]�[0m
2025-03-11T09:46:01.2926834Z �[0m�[1mmodule.log_analytics_workspace.azurerm_log_analytics_workspace.this: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.OperationalInsights/workspaces/bov-mrdc-acc-we-law-001]�[0m
2025-03-11T09:46:01.2971985Z �[0m�[1mmodule.asp_frontend.azurerm_service_plan.this: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Web/serverFarms/bov-mrdc-acc-frontend-we-asp-001]�[0m
2025-03-11T09:46:01.3031722Z �[0m�[1mmodule.storage_account_libs.azurerm_storage_account.current: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Storage/storageAccounts/bovmijnrdcaccwestg002]�[0m
2025-03-11T09:46:01.3069766Z �[0m�[1mmodule.log_analytics_workspace.azurerm_log_analytics_query_pack.this: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.OperationalInsights/queryPacks/bov-mrdc-acc-we-pack-001]�[0m
2025-03-11T09:46:01.3070992Z �[0m�[1mmodule.storage_account.azurerm_storage_account.current: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Storage/storageAccounts/bovmijnrdcaccwestg001]�[0m
2025-03-11T09:46:01.3166556Z �[0m�[1mdata.azurerm_subnet.app: Read complete after 0s [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-infra-rg-001/providers/Microsoft.Network/virtualNetworks/bov-mijnrdc-acc-we-vnet-001/subnets/bov-mijnrdc-acc-we-app-snt]�[0m
2025-03-11T09:46:01.3189938Z �[0m�[1mmodule.app_configuration.azurerm_app_configuration.current: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.AppConfiguration/configurationStores/bov-mijnrdc-acc-we-appcs-001]�[0m
2025-03-11T09:46:01.3569777Z �[0m�[1mdata.azurerm_key_vault.ssl_certificate_keyvault: Read complete after 0s [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-infra-rg-001/providers/Microsoft.KeyVault/vaults/bov-mrdc-acc-we-kv-001]�[0m
2025-03-11T09:46:01.3599326Z �[0m�[1mdata.azurerm_key_vault_certificate.ssl_certificate: Reading...�[0m�[0m
2025-03-11T09:46:01.3887924Z �[0m�[1mmodule.key_vault_002.azurerm_key_vault.key_vault: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.KeyVault/vaults/bov-mrdc-acc-we-kv-002]�[0m
2025-03-11T09:46:01.4466649Z �[0m�[1mdata.azurerm_subscription.current: Read complete after 0s [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325]�[0m
2025-03-11T09:46:01.4483114Z �[0m�[1mazurerm_role_assignment.website_contributor: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourcegroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Authorization/roleAssignments/1137d4f9-8b50-cb3c-fad8-8ab2b5fa4127]�[0m
2025-03-11T09:46:01.4581475Z �[0m�[1mdata.azurerm_private_dns_zone.azconfig_io: Read complete after 0s [id=/subscriptions/b4966d0c-b0c3-409f-bc72-74f0f110b84d/resourceGroups/bov-idtprod-we-infra-rg-001/providers/Microsoft.Network/privateDnsZones/privatelink.azconfig.io]�[0m
2025-03-11T09:46:01.5133509Z �[0m�[1mdata.azurerm_subnet.pep: Read complete after 1s [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-infra-rg-001/providers/Microsoft.Network/virtualNetworks/bov-mijnrdc-acc-we-vnet-001/subnets/bov-mijnrdc-acc-we-pep-snt]�[0m
2025-03-11T09:46:01.5845493Z �[0m�[1mdata.azurerm_key_vault_certificate.ssl_certificate: Read complete after 1s [id=https://bov-mrdc-acc-we-kv-001.vault.azure.net/certificates/mijn-acc-rdc-nl/60cb2e0d5c51406a8702dda18c1bb269]�[0m
2025-03-11T09:46:01.7173947Z �[0m�[1mazurerm_role_assignment.app_configuration_data_owner_sc: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.AppConfiguration/configurationStores/bov-mijnrdc-acc-we-appcs-001/providers/Microsoft.Authorization/roleAssignments/de012752-b484-8f52-89ac-27af0164e181]�[0m
2025-03-11T09:46:01.7229880Z �[0m�[1mmodule.pe_appcs_001.azurerm_private_endpoint.private_endpoints: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Network/privateEndpoints/bov-mijnrdc-acc-appcs-001-we-pep-001]�[0m
2025-03-11T09:46:01.9021637Z �[0m�[1mmodule.application_insights.azurerm_application_insights.this: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Insights/components/bov-mrdc-acc-we-ain-001]�[0m
2025-03-11T09:46:03.1724746Z �[0m�[1mmodule.appservice_mijnrdc.azurerm_windows_web_app.current: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Web/sites/bov-mrdc-acc-mijnrdc-we-app-001]�[0m
2025-03-11T09:46:04.1247798Z �[0m�[1mmodule.storage_account_libs.azurerm_storage_account_network_rules.current: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Storage/storageAccounts/bovmijnrdcaccwestg002]�[0m
2025-03-11T09:46:04.1250537Z �[0m�[1mazurerm_storage_container.libs: Refreshing state... [id=https://bovmijnrdcaccwestg002.blob.core.windows.net/libs]�[0m
2025-03-11T09:46:05.1311913Z �[0m�[1mmodule.storage_account.azurerm_storage_account_network_rules.current: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Storage/storageAccounts/bovmijnrdcaccwestg001]�[0m
2025-03-11T09:46:05.1344244Z �[0m�[1mazurerm_role_assignment.storage_table_data_contributor_developers: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Storage/storageAccounts/bovmijnrdcaccwestg001/providers/Microsoft.Authorization/roleAssignments/64971c8e-a8ce-2394-c215-0156878eb23b]�[0m
2025-03-11T09:46:05.1383213Z �[0m�[1mazurerm_role_assignment.storage_table_data_contributor_sc: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Storage/storageAccounts/bovmijnrdcaccwestg001/providers/Microsoft.Authorization/roleAssignments/6ec5f51c-3b65-ea22-e57d-5ff9b5cfe7d0]�[0m
2025-03-11T09:46:05.1384887Z �[0m�[1mazurerm_role_assignment.storage_blob_data_contributor_developers: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Storage/storageAccounts/bovmijnrdcaccwestg001/providers/Microsoft.Authorization/roleAssignments/b6a3e20c-a815-9008-8cc2-82d65c038323]�[0m
2025-03-11T09:46:05.1395825Z �[0m�[1mazurerm_storage_table.announcements: Refreshing state... [id=https://bovmijnrdcaccwestg001.table.core.windows.net/Tables('Announcements')]�[0m
2025-03-11T09:46:05.1418431Z �[0m�[1mazurerm_storage_container.profile: Refreshing state... [id=https://bovmijnrdcaccwestg001.blob.core.windows.net/profile]�[0m
2025-03-11T09:46:05.1422609Z �[0m�[1mazurerm_role_assignment.storage_blob_data_contributor_sc: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Storage/storageAccounts/bovmijnrdcaccwestg001/providers/Microsoft.Authorization/roleAssignments/7d32e8ec-da3d-bc0c-15e2-e829a577bf75]�[0m
2025-03-11T09:46:05.1423689Z �[0m�[1mazurerm_storage_table.services: Refreshing state... [id=https://bovmijnrdcaccwestg001.table.core.windows.net/Tables('Services')]�[0m
2025-03-11T09:46:17.6125664Z 
2025-03-11T09:46:17.6127424Z !!!!!!!!!!!!!!!!!!!!!!!!!!! TERRAFORM CRASH !!!!!!!!!!!!!!!!!!!!!!!!!!!!
2025-03-11T09:46:17.6127589Z 
2025-03-11T09:46:17.6127872Z Terraform crashed! This is always indicative of a bug within Terraform.
2025-03-11T09:46:17.6128205Z Please report the crash with Terraform[1] so that we can fix this.
2025-03-11T09:46:17.6128479Z 
2025-03-11T09:46:17.6128708Z When reporting bugs, please include your terraform version, the stack trace
2025-03-11T09:46:17.6129054Z shown below, and any additional information which may help replicate the issue.
2025-03-11T09:46:17.6129185Z 
2025-03-11T09:46:17.6129423Z [1]: https://github.com/hashicorp/terraform/issues
2025-03-11T09:46:17.6129547Z 
2025-03-11T09:46:17.6129812Z !!!!!!!!!!!!!!!!!!!!!!!!!!! TERRAFORM CRASH !!!!!!!!!!!!!!!!!!!!!!!!!!!!
2025-03-11T09:46:17.6129973Z 
2025-03-11T09:46:17.6130286Z panic: no expansion has been registered for azurerm_app_service_custom_hostname_binding.mijn_staging_rdc_nl
2025-03-11T09:46:17.6137106Z goroutine 1622 [running]:
2025-03-11T09:46:17.6137373Z runtime/debug.Stack()
2025-03-11T09:46:17.6137648Z 	runtime/debug/stack.go:26 +0x5e
2025-03-11T09:46:17.6137925Z github.com/hashicorp/terraform/internal/logging.PanicHandler()
2025-03-11T09:46:17.6138346Z 	github.com/hashicorp/terraform/internal/logging/panic.go:84 +0x16a
2025-03-11T09:46:17.6138597Z panic({0x2fee600?, 0xc002d0a900?})
2025-03-11T09:46:17.6138822Z 	runtime/panic.go:785 +0x132
2025-03-11T09:46:17.6139078Z github.com/hashicorp/terraform/internal/terraform.(*Graph).walk.func1.1()
2025-03-11T09:46:17.6139372Z 	github.com/hashicorp/terraform/internal/terraform/graph.go:59 +0x4c5
2025-03-11T09:46:17.6139617Z panic({0x2fee600?, 0xc002d0a900?})
2025-03-11T09:46:17.6139862Z 	runtime/panic.go:785 +0x132
2025-03-11T09:46:17.6140235Z github.com/hashicorp/terraform/internal/instances.(*Expander).ResourceInstanceKeys(0xc00094e0f0?, {{}, {0x0, 0x0, 0x0}, {{}, 0x4d, {0xc0008a0f90, 0x2b}, {0xc00089ca38, ...}}})
2025-03-11T09:46:17.6140656Z 	github.com/hashicorp/terraform/internal/instances/expander.go:448 +0x208
2025-03-11T09:46:17.6141089Z github.com/hashicorp/terraform/internal/terraform.(*evaluationStateData).GetResource(0xc001136bd0, {{}, 0x4d, {0xc0008a0f90, 0x2b}, {0xc00089ca38, 0x13}}, {{0xc00086a420, 0xa}, {0x73, ...}, ...})
2025-03-11T09:46:17.6141494Z 	github.com/hashicorp/terraform/internal/terraform/evaluate.go:535 +0x295
2025-03-11T09:46:17.6141872Z github.com/hashicorp/terraform/internal/lang.(*Scope).evalContext(0xc001136c60, {0xc0015f8b48, 0x1, 0x1}, {0x0, 0x0})
2025-03-11T09:46:17.6142208Z 	github.com/hashicorp/terraform/internal/lang/eval.go:375 +0x1a50
2025-03-11T09:46:17.6142501Z github.com/hashicorp/terraform/internal/lang.(*Scope).EvalContext(...)
2025-03-11T09:46:17.6142784Z 	github.com/hashicorp/terraform/internal/lang/eval.go:246
2025-03-11T09:46:17.6143257Z github.com/hashicorp/terraform/internal/terraform.(*forEachEvaluator).Value(0xc001125490)
2025-03-11T09:46:17.6143608Z 	github.com/hashicorp/terraform/internal/terraform/eval_for_each.go:180 +0x14d
2025-03-11T09:46:17.6143989Z github.com/hashicorp/terraform/internal/terraform.(*forEachEvaluator).ImportValues(0xc001125490)
2025-03-11T09:46:17.6144651Z 	github.com/hashicorp/terraform/internal/terraform/eval_for_each.go:119 +0x31
2025-03-11T09:46:17.6145017Z github.com/hashicorp/terraform/internal/terraform.(*nodeExpandPlannableResource).expandResourceImports(0xc0025dba40, {0x3dedd00, 0xc001c4a600}, 0x0)
2025-03-11T09:46:17.6145506Z 	github.com/hashicorp/terraform/internal/terraform/node_resource_plan.go:202 +0x27d
2025-03-11T09:46:17.6145915Z github.com/hashicorp/terraform/internal/terraform.(*nodeExpandPlannableResource).DynamicExpand(0xc0025dba40, {0x3dedd00, 0xc001c4a600})
2025-03-11T09:46:17.6146329Z 	github.com/hashicorp/terraform/internal/terraform/node_resource_plan.go:134 +0x54b
2025-03-11T09:46:17.6146687Z github.com/hashicorp/terraform/internal/terraform.(*Graph).walk.func1({0x3671a60, 0xc0025dba40})
2025-03-11T09:46:17.6147043Z 	github.com/hashicorp/terraform/internal/terraform/graph.go:153 +0x9c2
2025-03-11T09:46:17.6147420Z github.com/hashicorp/terraform/internal/dag.(*Walker).walkVertex(0xc0008283c0, {0x3671a60, 0xc0025dba40}, 0xc000faa080)
2025-03-11T09:46:17.6147794Z 	github.com/hashicorp/terraform/internal/dag/walk.go:384 +0x2d1
2025-03-11T09:46:17.6148134Z created by github.com/hashicorp/terraform/internal/dag.(*Walker).Update in goroutine 1191
2025-03-11T09:46:17.6148641Z 	github.com/hashicorp/terraform/internal/dag/walk.go:307 +0xfb3
2025-03-11T09:46:17.6159284Z 
2025-03-11T09:46:17.6212920Z ##[warning]Can't find loc string for key: TerraformPlanFailed
2025-03-11T09:46:17.6221376Z ##[error]Error: TerraformPlanFailed 11
2025-03-11T09:46:17.6231266Z ##[section]Finishing: Terraform Plan

jbardin · 2025-03-11T18:02:07Z

Thanks @realbart

The error in the configuration is that the import block's for_each is referencing the import target, but that is inherently creating a logical cycle since the import target needs the result of the import to be planned. This means when we try to lookup the for_each data it has not yet been evaluated resulting in the panic.

realbart added bug new new issue not yet triaged labels Mar 11, 2025

jbardin changed the title ~~Error while iterating over import hostname binding~~ import for_each should not be able to reference the import target Mar 11, 2025

jbardin added core import Importing resources confirmed a Terraform Core team member has reproduced this issue and removed new new issue not yet triaged labels Mar 11, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

import `for_each` should not be able to reference the import target #36672

import `for_each` should not be able to reference the import target #36672

realbart commented Mar 11, 2025

dbanck commented Mar 11, 2025

realbart commented Mar 11, 2025

jbardin commented Mar 11, 2025

import for_each should not be able to reference the import target #36672

import for_each should not be able to reference the import target #36672

Comments

realbart commented Mar 11, 2025

Terraform Version

Terraform Configuration Files

Debug Output

Expected Behavior

Actual Behavior

Steps to Reproduce

dbanck commented Mar 11, 2025

realbart commented Mar 11, 2025

jbardin commented Mar 11, 2025

import `for_each` should not be able to reference the import target #36672

import `for_each` should not be able to reference the import target #36672