import `for_each` should not be able to reference the import target

[realbart]

Terraform Version

4.421.33

Terraform Configuration Files

Starting: Terraform Init
==============================================================================
Task         : Terraform
Description  : Execute terraform commands to manage resources on AzureRM, Amazon Web Services(AWS) and Google Cloud Platform(GCP). v4.241.11
Version      : 4.241.33
Author       : Microsoft Corporation
Help         : [Learn more about this task](https://aka.ms/devlabs/ado/tf/task/v4)
==============================================================================
/agent/_work/_tool/terraform/1.11.1/x64/terraform init -backend-config=storage_account_name=bovmijnrdcdevwestg -backend-config=container_name=mijnrdcdevwetfstatecnt001 -backend-config=key=Bovemij-mijnrdc-Acc-001.tfstate -backend-config=resource_group_name=bov-mijnrdc-dev-we-tf-rg-001 -backend-config=subscription_id=c50e3f67-8b25-43fe-9c07-4a22235ce0d9 -backend-config=tenant_id=ffe07873-d7b0-44f4-bd76-651315816bd1 -backend-config=client_id=*** -backend-config=oidc_token=*** -backend-config=use_oidc=true
Initializing the backend...

Successfully configured the backend "azurerm"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing modules...
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules?ref=36c1c924a6892931f80a12b0fbf7cfc8861c2176 for app_configuration...
- app_configuration in .terraform/modules/app_configuration/general/app_configuration
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules?ref=36c1c924a6892931f80a12b0fbf7cfc8861c2176 for application_insights...
- application_insights in .terraform/modules/application_insights/monitor/app_insights
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules?ref=36c1c924a6892931f80a12b0fbf7cfc8861c2176 for appservice_mijnrdc...
- appservice_mijnrdc in .terraform/modules/appservice_mijnrdc/compute/windows_web_app
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules?ref=36c1c924a6892931f80a12b0fbf7cfc8861c2176 for asp_frontend...
- asp_frontend in .terraform/modules/asp_frontend/compute/service_plan
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules?ref=36c1c924a6892931f80a12b0fbf7cfc8861c2176 for bovemij...
- bovemij in .terraform/modules/bovemij/bovemij
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules?ref=36c1c924a6892931f80a12b0fbf7cfc8861c2176 for key_vault_002...
- key_vault_002 in .terraform/modules/key_vault_002/general/key_vault
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules?ref=36c1c924a6892931f80a12b0fbf7cfc8861c2176 for log_analytics_workspace...
- log_analytics_workspace in .terraform/modules/log_analytics_workspace/monitor/log_analytics_workspace
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules for pe_appcs_001...
- pe_appcs_001 in .terraform/modules/pe_appcs_001/networking/private_endpoint
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules for pe_mijnrdc_app_001...
- pe_mijnrdc_app_001 in .terraform/modules/pe_mijnrdc_app_001/networking/private_endpoint
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules?ref=36c1c924a6892931f80a12b0fbf7cfc8861c2176 for storage_account...
- storage_account in .terraform/modules/storage_account/storage/storage_account
Downloading git::https://k7jpbx4wguautb7uvbrjsbapzq73hgz6euijypyzwc4s7v7gyyca@dev.azure.com/Bovemij/Azure%20Cloud/_git/Terraform-Modules?ref=36c1c924a6892931f80a12b0fbf7cfc8861c2176 for storage_account_libs...
- storage_account_libs in .terraform/modules/storage_account_libs/storage/storage_account
Initializing provider plugins...
- Finding hashicorp/azurerm versions matching ">= 3.68.0, >= 3.97.1, 3.117.0, < 4.0.0"...
- Installing hashicorp/azurerm v3.117.0...
- Installed hashicorp/azurerm v3.117.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider

Debug Output

Starting: Terraform Plan
==============================================================================
Task         : Terraform
Description  : Execute terraform commands to manage resources on AzureRM, Amazon Web Services(AWS) and Google Cloud Platform(GCP). v4.241.11
Version      : 4.241.33
Author       : Microsoft Corporation
Help         : [Learn more about this task](https://aka.ms/devlabs/ado/tf/task/v4)
==============================================================================
/agent/_work/_tool/terraform/1.11.1/x64/terraform providers

Providers required by configuration:
.
├── provider[registry.terraform.io/hashicorp/azurerm] 3.117.0
├── module.application_insights
│   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.97.1, < 4.0.0
├── module.appservice_mijnrdc
│   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
├── module.pe_mijnrdc_app_001
│   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
├── module.storage_account_libs
│   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
├── module.asp_frontend
│   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
├── module.key_vault_002
│   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
├── module.log_analytics_workspace
│   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
├── module.bovemij
├── module.pe_appcs_001
│   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
├── module.app_configuration
│   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
└── module.storage_account
    └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0

Providers required by state:

    provider[registry.terraform.io/hashicorp/azurerm]

/agent/_work/_tool/terraform/1.11.1/x64/terraform plan -var-file=variables/acc.tfvars -out=/agent/_work/3/Acceptance.tfplan -input=false -detailed-exitcode
data.azurerm_private_dns_zone.azurewebsites_net: Reading...

Expected Behavior

The resource should have been improted using this code:

resource "azurerm_app_service_custom_hostname_binding" "mijn_staging_rdc_nl" {
  count               = var.web_app_slot_count
  hostname            = "mijn${var.environment_suffix}-staging.rdc.nl"
  app_service_name    = "${module.appservice_mijnrdc.name}/staging"
  resource_group_name = data.azurerm_resource_group.app.name
  ssl_state           = module.bovemij.azurerm_app_service_custom_hostname_binding.ssl_state.sni_enabled
  thumbprint          = data.azurerm_key_vault_certificate.ssl_certificate_staging[0].thumbprint
}

The import:

import {
  for_each = azurerm_app_service_custom_hostname_binding.mijn_staging_rdc_nl
  id = "/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Web/sites/bov-mrdc-acc-mijnrdc-we-app-001/hostNameBindings/mijn-acc-staging.rdc.nl"
  to = azurerm_app_service_custom_hostname_binding.mijn_staging_rdc_nl[each.key]
}

Another way to generate the same error:

import {
  for_each = { for idx, val in azurerm_app_service_custom_hostname_binding.mijn_staging_rdc_nl : idx => val }
  id       = "/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Web/sites/bov-mrdc-acc-mijnrdc-we-app-001/hostNameBindings/mijn-acc-staging.rdc.nl"
  to       = azurerm_app_service_custom_hostname_binding.mijn_staging_rdc_nl[each.key]
}

My initial attampt that generated a differet error:

import {
  #  count = var.web_app_slot_count does not work here
  id       = "/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Web/sites/bov-mrdc-acc-mijnrdc-we-app-001/hostNameBindings/mijn-acc-staging.rdc.nl"
  to       = azurerm_app_service_custom_hostname_binding.mijn_staging_rdc_nl[0]
}

Actual Behavior

My Azure DevOps pipeline failed.

!!!!!!!!!!!!!!!!!!!!!!!!!!! TERRAFORM CRASH !!!!!!!!!!!!!!!!!!!!!!!!!!!!

Terraform crashed! This is always indicative of a bug within Terraform.
Please report the crash with Terraform[1] so that we can fix this.

When reporting bugs, please include your terraform version, the stack trace
shown below, and any additional information which may help replicate the issue.

[1]: https://github.com/hashicorp/terraform/issues

!!!!!!!!!!!!!!!!!!!!!!!!!!! TERRAFORM CRASH !!!!!!!!!!!!!!!!!!!!!!!!!!!!

Note:
My initial import yielded a different error:

data.azurerm_key_vault.ssl_certificate_keyvault: Read complete after 2s [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-infra-rg-001/providers/Microsoft.KeyVault/vaults/bov-mrdc-acc-we-kv-001]
data.azurerm_key_vault_certificate.ssl_certificate: Reading...
data.azurerm_key_vault_certificate.ssl_certificate: Read complete after 0s [id=https://bov-mrdc-acc-we-kv-001.vault.azure.net/certificates/mijn-acc-rdc-nl/60cb2e0d5c51406a8702dda18c1bb269]
azurerm_app_service_custom_hostname_binding.mijn_rdc_nl: Preparing import... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Web/sites/bov-mrdc-acc-mijnrdc-we-app-001/hostNameBindings/mijn-acc.rdc.nl]
azurerm_role_assignment.storage_blob_data_contributor_app: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Storage/storageAccounts/bovmijnrdcaccwestg001/providers/Microsoft.Authorization/roleAssignments/91eac5d9-885a-4e7a-f9ea-742e9038c2ab]
module.key_vault_002.azurerm_key_vault_access_policy.access_policy["bov_mijnrdc_devops_tf_sc"]: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.KeyVault/vaults/bov-mrdc-acc-we-kv-002/objectId/ea163101-fa9a-423f-8349-0f005a2f0ffb]
module.key_vault_002.azurerm_key_vault_access_policy.access_policy["sub_bovemij_mijnrdc_infra_grp"]: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.KeyVault/vaults/bov-mrdc-acc-we-kv-002/objectId/f267c909-2b09-456a-a255-3781c01e1cf4]
azurerm_role_assignment.storage_table_data_contributor_app: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Storage/storageAccounts/bovmijnrdcaccwestg001/providers/Microsoft.Authorization/roleAssignments/4f4e05f7-8978-c599-a26e-23e12c061f4c]
azurerm_app_service_custom_hostname_binding.mijn_rdc_nl: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Web/sites/bov-mrdc-acc-mijnrdc-we-app-001/hostNameBindings/mijn-acc.rdc.nl]
module.pe_mijnrdc_app_001.azurerm_private_endpoint.private_endpoints: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Network/privateEndpoints/bov-mijnrdc-acc-mijnrdc-app-001-we-pep-001]
azurerm_role_assignment.app_configuration_data_reader_app: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.AppConfiguration/configurationStores/bov-mijnrdc-acc-we-appcs-001/providers/Microsoft.Authorization/roleAssignments/b2e9bf2c-7be9-0290-9aa5-f7e15fc72263]
module.key_vault_002.azurerm_key_vault_access_policy.access_policy["appservice_mijnrdc"]: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.KeyVault/vaults/bov-mrdc-acc-we-kv-002/objectId/57b2d97b-e869-4d37-90ea-bb2714972646]

Terraform planned the following actions, but then encountered a problem:

  # azurerm_app_service_custom_hostname_binding.mijn_rdc_nl will be imported
    resource "azurerm_app_service_custom_hostname_binding" "mijn_rdc_nl" {
        app_service_name    = "bov-mrdc-acc-mijnrdc-we-app-001"
        hostname            = "mijn-acc.rdc.nl"
        id                  = "/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Web/sites/bov-mrdc-acc-mijnrdc-we-app-001/hostNameBindings/mijn-acc.rdc.nl"
        resource_group_name = "bov-mijnrdc-acc-we-app-rg-001"
        ssl_state           = "SniEnabled"
        thumbprint          = "BEF32A2749FF6C568B72D358561798AE6FC05186"
        virtual_ip          = null
    }

Plan: 1 to import, 0 to add, 0 to change, 0 to destroy.
╷
│ Error: Configuration for import target does not exist
│ 
│ The configuration for the given import
│ azurerm_app_service_custom_hostname_binding.mijn_staging_rdc_nl[0] does not
│ exist. All target instances must have an associated configuration to be
│ imported.
╵

##[warning]Can't find loc string for key: TerraformPlanFailed
##[error]Error: TerraformPlanFailed 1
Finishing: Terraform Plan

Steps to Reproduce

1. Terraform

resource "azurerm_app_service_custom_hostname_binding" "mijn_staging_rdc_nl" {
  count               = var.web_app_slot_count
  hostname            = "mijn${var.environment_suffix}-staging.rdc.nl"
  app_service_name    = "${module.appservice_mijnrdc.name}/staging"
  resource_group_name = data.azurerm_resource_group.app.name
  ssl_state           = module.bovemij.azurerm_app_service_custom_hostname_binding.ssl_state.sni_enabled
  thumbprint          = data.azurerm_key_vault_certificate.ssl_certificate_staging[0].thumbprint
}

import {
  for_each = azurerm_app_service_custom_hostname_binding.mijn_staging_rdc_nl
  id = "/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Web/sites/bov-mrdc-acc-mijnrdc-we-app-001/hostNameBindings/mijn-acc-staging.rdc.nl"
  to = azurerm_app_service_custom_hostname_binding.mijn_staging_rdc_nl[each.key]
}
```


2. Pipeline (Azure DevOps, Yaml)
```
            - task: TerraformTaskV4@4
              displayName: 'Terraform Init'
              inputs:
                workingDirectory: Terraform
                backendServiceArm: ${{ parameters.backendServiceArm }}
                backendAzureRmResourceGroupName: ${{ parameters.backendAzureRmResourceGroupName }}
                backendAzureRmStorageAccountName: ${{ parameters.backendAzureRmStorageAccountName }}
                backendAzureRmContainerName: ${{ parameters.backendAzureRmContainerName }}
                backendAzureRmKey: ${{ parameters.backendAzureRmKey }}

            - task: TerraformTaskV4@4
              displayName: 'Terraform Apply'
              inputs:
                provider: 'azurerm'
                command: 'apply'
                commandOptions: '-input=false $(Pipeline.Workspace)/${{ parameters.environmentName }}.tfplan'
                workingDirectory: Terraform
                environmentServiceNameAzureRM: ${{ parameters.environmentServiceNameAzureRM }}
```


### Additional Context

Running through Azure Devops Pipeline

```
            - task: TerraformTaskV4@4
              displayName: 'Terraform Init'
              inputs:
                workingDirectory: Terraform
                backendServiceArm: ${{ parameters.backendServiceArm }}
                backendAzureRmResourceGroupName: ${{ parameters.backendAzureRmResourceGroupName }}
                backendAzureRmStorageAccountName: ${{ parameters.backendAzureRmStorageAccountName }}
                backendAzureRmContainerName: ${{ parameters.backendAzureRmContainerName }}
                backendAzureRmKey: ${{ parameters.backendAzureRmKey }}

            - task: TerraformTaskV4@4
              displayName: 'Terraform Apply'
              inputs:
                provider: 'azurerm'
                command: 'apply'
                commandOptions: '-input=false $(Pipeline.Workspace)/${{ parameters.environmentName }}.tfplan'
                workingDirectory: Terraform
                environmentServiceNameAzureRM: ${{ parameters.environmentServiceNameAzureRM }}
```

### References

_No response_

### Generative AI / LLM assisted development?

CoPilot

[dbanck]

Hi @realbart,

Thanks for filing the issue. Can you please check if there is any additional output after the !!!!!!!!!!!!!!!!!!!!!!!!!!! TERRAFORM CRASH !!!!!!!!!!!!!!!!!!!!!!!!!!!! message? There should be an error message and a stack trace. Having both will make debugging this issue much easier.

[realbart]

Hi @dbanck

I'm sorry. I don't know why my entry was trucated (I put it in "Debug Output")
Here another attempt:

2025-03-11T09:45:53.3728790Z ##[section]Starting: Terraform Plan
2025-03-11T09:45:53.3736297Z ==============================================================================
2025-03-11T09:45:53.3736477Z Task         : Terraform
2025-03-11T09:45:53.3736794Z Description  : Execute terraform commands to manage resources on AzureRM, Amazon Web Services(AWS) and Google Cloud Platform(GCP). v4.241.11
2025-03-11T09:45:53.3737012Z Version      : 4.241.33
2025-03-11T09:45:53.3737224Z Author       : Microsoft Corporation
2025-03-11T09:45:53.3737344Z Help         : [Learn more about this task](https://aka.ms/devlabs/ado/tf/task/v4)
2025-03-11T09:45:53.3737495Z ==============================================================================
2025-03-11T09:45:53.9166537Z [command]/agent/_work/_tool/terraform/1.11.1/x64/terraform providers
2025-03-11T09:45:55.8018717Z 
2025-03-11T09:45:55.8019696Z Providers required by configuration:
2025-03-11T09:45:55.8020148Z .
2025-03-11T09:45:55.8020856Z ├── provider[registry.terraform.io/hashicorp/azurerm] 3.117.0
2025-03-11T09:45:55.8021434Z ├── module.application_insights
2025-03-11T09:45:55.8022007Z │   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.97.1, < 4.0.0
2025-03-11T09:45:55.8022507Z ├── module.appservice_mijnrdc
2025-03-11T09:45:55.8023177Z │   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
2025-03-11T09:45:55.8023675Z ├── module.pe_mijnrdc_app_001
2025-03-11T09:45:55.8024228Z │   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
2025-03-11T09:45:55.8024730Z ├── module.storage_account_libs
2025-03-11T09:45:55.8025285Z │   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
2025-03-11T09:45:55.8025767Z ├── module.asp_frontend
2025-03-11T09:45:55.8026316Z │   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
2025-03-11T09:45:55.8026806Z ├── module.key_vault_002
2025-03-11T09:45:55.8027366Z │   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
2025-03-11T09:45:55.8027913Z ├── module.log_analytics_workspace
2025-03-11T09:45:55.8028610Z │   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
2025-03-11T09:45:55.8029256Z ├── module.bovemij
2025-03-11T09:45:55.8029720Z ├── module.pe_appcs_001
2025-03-11T09:45:55.8030287Z │   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
2025-03-11T09:45:55.8030873Z ├── module.app_configuration
2025-03-11T09:45:55.8031456Z │   └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
2025-03-11T09:45:55.8031941Z └── module.storage_account
2025-03-11T09:45:55.8032518Z     └── provider[registry.terraform.io/hashicorp/azurerm] >= 3.68.0, < 4.0.0
2025-03-11T09:45:55.8032911Z 
2025-03-11T09:45:55.8033299Z Providers required by state:
2025-03-11T09:45:55.8033602Z 
2025-03-11T09:45:55.8033987Z     provider[registry.terraform.io/hashicorp/azurerm]
2025-03-11T09:45:55.8034341Z 
2025-03-11T09:45:55.8040459Z [command]/agent/_work/_tool/terraform/1.11.1/x64/terraform plan -var-file=variables/acc.tfvars -out=/agent/_work/3/Acceptance.tfplan -input=false -detailed-exitcode
2025-03-11T09:46:00.8855715Z �[0m�[1mdata.azurerm_private_dns_zone.azurewebsites_net: Reading...�[0m�[0m
2025-03-11T09:46:00.8871330Z �[0m�[1mdata.azurerm_private_dns_zone.azconfig_io: Reading...�[0m�[0m
2025-03-11T09:46:01.0458108Z �[0m�[1mdata.azurerm_private_dns_zone.azurewebsites_net: Read complete after 0s [id=/subscriptions/b4966d0c-b0c3-409f-bc72-74f0f110b84d/resourceGroups/bov-idtprod-we-infra-rg-001/providers/Microsoft.Network/privateDnsZones/privatelink.azurewebsites.net]�[0m
2025-03-11T09:46:01.2259443Z �[0m�[1mdata.azurerm_resource_group.infra: Reading...�[0m�[0m
2025-03-11T09:46:01.2260245Z �[0m�[1mdata.azurerm_subnet.pep: Reading...�[0m�[0m
2025-03-11T09:46:01.2261279Z �[0m�[1mdata.azurerm_subscription.current: Reading...�[0m�[0m
2025-03-11T09:46:01.2261834Z �[0m�[1mdata.azurerm_resource_group.app: Reading...�[0m�[0m
2025-03-11T09:46:01.2264270Z �[0m�[1mdata.azurerm_subnet.app: Reading...�[0m�[0m
2025-03-11T09:46:01.2264707Z �[0m�[1mmodule.key_vault_002.data.azurerm_client_config.current: Reading...�[0m�[0m
2025-03-11T09:46:01.2265501Z �[0m�[1mdata.azurerm_key_vault.ssl_certificate_keyvault: Reading...�[0m�[0m
2025-03-11T09:46:01.2348749Z �[0m�[1mmodule.key_vault_002.data.azurerm_client_config.current: Read complete after 0s [id=Y2xpZW50Q29uZmlncy9jbGllbnRJZD1jNDIyZmU0ZS1lNTgzLTQxMzYtODg2Yy1iNmI4Zjg1NzRlNWI7b2JqZWN0SWQ9ZWExNjMxMDEtZmE5YS00MjNmLTgzNDktMGYwMDVhMmYwZmZiO3N1YnNjcmlwdGlvbklkPTcwYTc4MTQ0LTEzM2MtNGI0OS1hMmUyLThkY2U0NmNmYzMyNTt0ZW5hbnRJZD1mZmUwNzg3My1kN2IwLTQ0ZjQtYmQ3Ni02NTEzMTU4MTZiZDE=]�[0m
2025-03-11T09:46:01.2881699Z �[0m�[1mdata.azurerm_resource_group.app: Read complete after 0s [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001]�[0m
2025-03-11T09:46:01.2902226Z �[0m�[1mdata.azurerm_resource_group.infra: Read complete after 0s [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-infra-rg-001]�[0m
2025-03-11T09:46:01.2926834Z �[0m�[1mmodule.log_analytics_workspace.azurerm_log_analytics_workspace.this: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.OperationalInsights/workspaces/bov-mrdc-acc-we-law-001]�[0m
2025-03-11T09:46:01.2971985Z �[0m�[1mmodule.asp_frontend.azurerm_service_plan.this: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Web/serverFarms/bov-mrdc-acc-frontend-we-asp-001]�[0m
2025-03-11T09:46:01.3031722Z �[0m�[1mmodule.storage_account_libs.azurerm_storage_account.current: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Storage/storageAccounts/bovmijnrdcaccwestg002]�[0m
2025-03-11T09:46:01.3069766Z �[0m�[1mmodule.log_analytics_workspace.azurerm_log_analytics_query_pack.this: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.OperationalInsights/queryPacks/bov-mrdc-acc-we-pack-001]�[0m
2025-03-11T09:46:01.3070992Z �[0m�[1mmodule.storage_account.azurerm_storage_account.current: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Storage/storageAccounts/bovmijnrdcaccwestg001]�[0m
2025-03-11T09:46:01.3166556Z �[0m�[1mdata.azurerm_subnet.app: Read complete after 0s [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-infra-rg-001/providers/Microsoft.Network/virtualNetworks/bov-mijnrdc-acc-we-vnet-001/subnets/bov-mijnrdc-acc-we-app-snt]�[0m
2025-03-11T09:46:01.3189938Z �[0m�[1mmodule.app_configuration.azurerm_app_configuration.current: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.AppConfiguration/configurationStores/bov-mijnrdc-acc-we-appcs-001]�[0m
2025-03-11T09:46:01.3569777Z �[0m�[1mdata.azurerm_key_vault.ssl_certificate_keyvault: Read complete after 0s [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-infra-rg-001/providers/Microsoft.KeyVault/vaults/bov-mrdc-acc-we-kv-001]�[0m
2025-03-11T09:46:01.3599326Z �[0m�[1mdata.azurerm_key_vault_certificate.ssl_certificate: Reading...�[0m�[0m
2025-03-11T09:46:01.3887924Z �[0m�[1mmodule.key_vault_002.azurerm_key_vault.key_vault: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.KeyVault/vaults/bov-mrdc-acc-we-kv-002]�[0m
2025-03-11T09:46:01.4466649Z �[0m�[1mdata.azurerm_subscription.current: Read complete after 0s [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325]�[0m
2025-03-11T09:46:01.4483114Z �[0m�[1mazurerm_role_assignment.website_contributor: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourcegroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Authorization/roleAssignments/1137d4f9-8b50-cb3c-fad8-8ab2b5fa4127]�[0m
2025-03-11T09:46:01.4581475Z �[0m�[1mdata.azurerm_private_dns_zone.azconfig_io: Read complete after 0s [id=/subscriptions/b4966d0c-b0c3-409f-bc72-74f0f110b84d/resourceGroups/bov-idtprod-we-infra-rg-001/providers/Microsoft.Network/privateDnsZones/privatelink.azconfig.io]�[0m
2025-03-11T09:46:01.5133509Z �[0m�[1mdata.azurerm_subnet.pep: Read complete after 1s [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-infra-rg-001/providers/Microsoft.Network/virtualNetworks/bov-mijnrdc-acc-we-vnet-001/subnets/bov-mijnrdc-acc-we-pep-snt]�[0m
2025-03-11T09:46:01.5845493Z �[0m�[1mdata.azurerm_key_vault_certificate.ssl_certificate: Read complete after 1s [id=https://bov-mrdc-acc-we-kv-001.vault.azure.net/certificates/mijn-acc-rdc-nl/60cb2e0d5c51406a8702dda18c1bb269]�[0m
2025-03-11T09:46:01.7173947Z �[0m�[1mazurerm_role_assignment.app_configuration_data_owner_sc: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.AppConfiguration/configurationStores/bov-mijnrdc-acc-we-appcs-001/providers/Microsoft.Authorization/roleAssignments/de012752-b484-8f52-89ac-27af0164e181]�[0m
2025-03-11T09:46:01.7229880Z �[0m�[1mmodule.pe_appcs_001.azurerm_private_endpoint.private_endpoints: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Network/privateEndpoints/bov-mijnrdc-acc-appcs-001-we-pep-001]�[0m
2025-03-11T09:46:01.9021637Z �[0m�[1mmodule.application_insights.azurerm_application_insights.this: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Insights/components/bov-mrdc-acc-we-ain-001]�[0m
2025-03-11T09:46:03.1724746Z �[0m�[1mmodule.appservice_mijnrdc.azurerm_windows_web_app.current: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Web/sites/bov-mrdc-acc-mijnrdc-we-app-001]�[0m
2025-03-11T09:46:04.1247798Z �[0m�[1mmodule.storage_account_libs.azurerm_storage_account_network_rules.current: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Storage/storageAccounts/bovmijnrdcaccwestg002]�[0m
2025-03-11T09:46:04.1250537Z �[0m�[1mazurerm_storage_container.libs: Refreshing state... [id=https://bovmijnrdcaccwestg002.blob.core.windows.net/libs]�[0m
2025-03-11T09:46:05.1311913Z �[0m�[1mmodule.storage_account.azurerm_storage_account_network_rules.current: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Storage/storageAccounts/bovmijnrdcaccwestg001]�[0m
2025-03-11T09:46:05.1344244Z �[0m�[1mazurerm_role_assignment.storage_table_data_contributor_developers: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Storage/storageAccounts/bovmijnrdcaccwestg001/providers/Microsoft.Authorization/roleAssignments/64971c8e-a8ce-2394-c215-0156878eb23b]�[0m
2025-03-11T09:46:05.1383213Z �[0m�[1mazurerm_role_assignment.storage_table_data_contributor_sc: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Storage/storageAccounts/bovmijnrdcaccwestg001/providers/Microsoft.Authorization/roleAssignments/6ec5f51c-3b65-ea22-e57d-5ff9b5cfe7d0]�[0m
2025-03-11T09:46:05.1384887Z �[0m�[1mazurerm_role_assignment.storage_blob_data_contributor_developers: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Storage/storageAccounts/bovmijnrdcaccwestg001/providers/Microsoft.Authorization/roleAssignments/b6a3e20c-a815-9008-8cc2-82d65c038323]�[0m
2025-03-11T09:46:05.1395825Z �[0m�[1mazurerm_storage_table.announcements: Refreshing state... [id=https://bovmijnrdcaccwestg001.table.core.windows.net/Tables('Announcements')]�[0m
2025-03-11T09:46:05.1418431Z �[0m�[1mazurerm_storage_container.profile: Refreshing state... [id=https://bovmijnrdcaccwestg001.blob.core.windows.net/profile]�[0m
2025-03-11T09:46:05.1422609Z �[0m�[1mazurerm_role_assignment.storage_blob_data_contributor_sc: Refreshing state... [id=/subscriptions/70a78144-133c-4b49-a2e2-8dce46cfc325/resourceGroups/bov-mijnrdc-acc-we-app-rg-001/providers/Microsoft.Storage/storageAccounts/bovmijnrdcaccwestg001/providers/Microsoft.Authorization/roleAssignments/7d32e8ec-da3d-bc0c-15e2-e829a577bf75]�[0m
2025-03-11T09:46:05.1423689Z �[0m�[1mazurerm_storage_table.services: Refreshing state... [id=https://bovmijnrdcaccwestg001.table.core.windows.net/Tables('Services')]�[0m
2025-03-11T09:46:17.6125664Z 
2025-03-11T09:46:17.6127424Z !!!!!!!!!!!!!!!!!!!!!!!!!!! TERRAFORM CRASH !!!!!!!!!!!!!!!!!!!!!!!!!!!!
2025-03-11T09:46:17.6127589Z 
2025-03-11T09:46:17.6127872Z Terraform crashed! This is always indicative of a bug within Terraform.
2025-03-11T09:46:17.6128205Z Please report the crash with Terraform[1] so that we can fix this.
2025-03-11T09:46:17.6128479Z 
2025-03-11T09:46:17.6128708Z When reporting bugs, please include your terraform version, the stack trace
2025-03-11T09:46:17.6129054Z shown below, and any additional information which may help replicate the issue.
2025-03-11T09:46:17.6129185Z 
2025-03-11T09:46:17.6129423Z [1]: https://github.com/hashicorp/terraform/issues
2025-03-11T09:46:17.6129547Z 
2025-03-11T09:46:17.6129812Z !!!!!!!!!!!!!!!!!!!!!!!!!!! TERRAFORM CRASH !!!!!!!!!!!!!!!!!!!!!!!!!!!!
2025-03-11T09:46:17.6129973Z 
2025-03-11T09:46:17.6130286Z panic: no expansion has been registered for azurerm_app_service_custom_hostname_binding.mijn_staging_rdc_nl
2025-03-11T09:46:17.6137106Z goroutine 1622 [running]:
2025-03-11T09:46:17.6137373Z runtime/debug.Stack()
2025-03-11T09:46:17.6137648Z 	runtime/debug/stack.go:26 +0x5e
2025-03-11T09:46:17.6137925Z github.com/hashicorp/terraform/internal/logging.PanicHandler()
2025-03-11T09:46:17.6138346Z 	github.com/hashicorp/terraform/internal/logging/panic.go:84 +0x16a
2025-03-11T09:46:17.6138597Z panic({0x2fee600?, 0xc002d0a900?})
2025-03-11T09:46:17.6138822Z 	runtime/panic.go:785 +0x132
2025-03-11T09:46:17.6139078Z github.com/hashicorp/terraform/internal/terraform.(*Graph).walk.func1.1()
2025-03-11T09:46:17.6139372Z 	github.com/hashicorp/terraform/internal/terraform/graph.go:59 +0x4c5
2025-03-11T09:46:17.6139617Z panic({0x2fee600?, 0xc002d0a900?})
2025-03-11T09:46:17.6139862Z 	runtime/panic.go:785 +0x132
2025-03-11T09:46:17.6140235Z github.com/hashicorp/terraform/internal/instances.(*Expander).ResourceInstanceKeys(0xc00094e0f0?, {{}, {0x0, 0x0, 0x0}, {{}, 0x4d, {0xc0008a0f90, 0x2b}, {0xc00089ca38, ...}}})
2025-03-11T09:46:17.6140656Z 	github.com/hashicorp/terraform/internal/instances/expander.go:448 +0x208
2025-03-11T09:46:17.6141089Z github.com/hashicorp/terraform/internal/terraform.(*evaluationStateData).GetResource(0xc001136bd0, {{}, 0x4d, {0xc0008a0f90, 0x2b}, {0xc00089ca38, 0x13}}, {{0xc00086a420, 0xa}, {0x73, ...}, ...})
2025-03-11T09:46:17.6141494Z 	github.com/hashicorp/terraform/internal/terraform/evaluate.go:535 +0x295
2025-03-11T09:46:17.6141872Z github.com/hashicorp/terraform/internal/lang.(*Scope).evalContext(0xc001136c60, {0xc0015f8b48, 0x1, 0x1}, {0x0, 0x0})
2025-03-11T09:46:17.6142208Z 	github.com/hashicorp/terraform/internal/lang/eval.go:375 +0x1a50
2025-03-11T09:46:17.6142501Z github.com/hashicorp/terraform/internal/lang.(*Scope).EvalContext(...)
2025-03-11T09:46:17.6142784Z 	github.com/hashicorp/terraform/internal/lang/eval.go:246
2025-03-11T09:46:17.6143257Z github.com/hashicorp/terraform/internal/terraform.(*forEachEvaluator).Value(0xc001125490)
2025-03-11T09:46:17.6143608Z 	github.com/hashicorp/terraform/internal/terraform/eval_for_each.go:180 +0x14d
2025-03-11T09:46:17.6143989Z github.com/hashicorp/terraform/internal/terraform.(*forEachEvaluator).ImportValues(0xc001125490)
2025-03-11T09:46:17.6144651Z 	github.com/hashicorp/terraform/internal/terraform/eval_for_each.go:119 +0x31
2025-03-11T09:46:17.6145017Z github.com/hashicorp/terraform/internal/terraform.(*nodeExpandPlannableResource).expandResourceImports(0xc0025dba40, {0x3dedd00, 0xc001c4a600}, 0x0)
2025-03-11T09:46:17.6145506Z 	github.com/hashicorp/terraform/internal/terraform/node_resource_plan.go:202 +0x27d
2025-03-11T09:46:17.6145915Z github.com/hashicorp/terraform/internal/terraform.(*nodeExpandPlannableResource).DynamicExpand(0xc0025dba40, {0x3dedd00, 0xc001c4a600})
2025-03-11T09:46:17.6146329Z 	github.com/hashicorp/terraform/internal/terraform/node_resource_plan.go:134 +0x54b
2025-03-11T09:46:17.6146687Z github.com/hashicorp/terraform/internal/terraform.(*Graph).walk.func1({0x3671a60, 0xc0025dba40})
2025-03-11T09:46:17.6147043Z 	github.com/hashicorp/terraform/internal/terraform/graph.go:153 +0x9c2
2025-03-11T09:46:17.6147420Z github.com/hashicorp/terraform/internal/dag.(*Walker).walkVertex(0xc0008283c0, {0x3671a60, 0xc0025dba40}, 0xc000faa080)
2025-03-11T09:46:17.6147794Z 	github.com/hashicorp/terraform/internal/dag/walk.go:384 +0x2d1
2025-03-11T09:46:17.6148134Z created by github.com/hashicorp/terraform/internal/dag.(*Walker).Update in goroutine 1191
2025-03-11T09:46:17.6148641Z 	github.com/hashicorp/terraform/internal/dag/walk.go:307 +0xfb3
2025-03-11T09:46:17.6159284Z 
2025-03-11T09:46:17.6212920Z ##[warning]Can't find loc string for key: TerraformPlanFailed
2025-03-11T09:46:17.6221376Z ##[error]Error: TerraformPlanFailed 11
2025-03-11T09:46:17.6231266Z ##[section]Finishing: Terraform Plan

[jbardin]

Thanks @realbart

The error in the configuration is that the import block's for_each is referencing the import target, but that is inherently creating a logical cycle since the import target needs the result of the import to be planned. This means when we try to lookup the for_each data it has not yet been evaluated resulting in the panic.

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.