Dynamic providers not supported

[jmapro]

Summary

tflint does not support dynamic provider usage supported since opentofu 1.9 https://opentofu.org/docs/language/providers/configuration/

Command

tflint --config=../.tflint.hcl

Terraform Configuration

locals {
  subscription_ids = {
    hub           = "aaaaa-bbbbb-ccccc-ddddd-eeeeee"
    production    = "aaaaa-bbbbb-ccccc-ddddd-eeeeee"
    preproduction = "aaaaa-bbbbb-ccccc-ddddd-eeeeee"
  }
}

provider "azurerm" {
  for_each = local.subscription_ids

  alias           = "all_subs"
  subscription_id = each.value
  tenant_id       = var.azure_tenant_id

  features {}
}

module "mdc" {
  source  = "./defender-for-cloud"

  for_each = toset(keys(local.subscription_ids))

  providers = {
    azurerm = azurerm.all_subs[each.key]
  }

  contact = {
    name  = "admins"
    email = var.alerts_contact_email
    phone = var.alerts_contact_phone
  }
  alert_notifications_enabled = true
  alerts_to_admins_enabled    = true
}

TFLint Configuration

plugin "azurerm" {
  enabled = true
  source  = "github.com/terraform-linters/tflint-ruleset-azurerm"
  version = "0.28.0"
}

config {
  call_module_type = "local"
  force = false
  disabled_by_default = false
  plugin_dir = "~/.tflint.d/plugins"

  varfile = ["terraform.tfvars.ci"]
}

rule "terraform_deprecated_interpolation" {
  enabled = true
}

rule "terraform_deprecated_index" {
  enabled = true
}

rule "terraform_unused_declarations" {
  enabled = true
}

rule "terraform_comment_syntax" {
  enabled = true
}

rule "terraform_documented_outputs" {
  enabled = true
}

rule "terraform_documented_variables" {
  enabled = true
}

rule "terraform_typed_variables" {
  enabled = true
}

rule "terraform_module_pinned_source" {
  enabled = true
}

rule "terraform_naming_convention" {
  enabled = true
}

rule "terraform_required_version" {
  enabled = true
}

rule "terraform_required_providers" {
  enabled = true
}

rule "terraform_unused_required_providers" {
  enabled = true
}

# Disabled since we have files like "variables-xxxx.tf" instead of a single "variables.tf"
rule "terraform_standard_module_structure" {
  enabled = false
}

Output

10:24:32 config.go:149: [INFO] Load config: ../.tflint.hcl
10:24:32 config.go:334: [DEBUG] Config loaded
10:24:32 config.go:335: [DEBUG]   CallModuleType: local
10:24:32 config.go:336: [DEBUG]   CallModuleTypeSet: true
10:24:32 config.go:337: [DEBUG]   Force: false
10:24:32 config.go:338: [DEBUG]   ForceSet: true
10:24:32 config.go:339: [DEBUG]   DisabledByDefault: false
10:24:32 config.go:340: [DEBUG]   DisabledByDefaultSet: true
10:24:32 config.go:341: [DEBUG]   PluginDir: ~/.tflint.d/plugins
10:24:32 config.go:342: [DEBUG]   PluginDirSet: true
10:24:32 config.go:343: [DEBUG]   Format:
10:24:32 config.go:344: [DEBUG]   FormatSet: false
10:24:32 config.go:345: [DEBUG]   Varfiles: terraform.tfvars.ci
10:24:32 config.go:346: [DEBUG]   Variables:
10:24:32 config.go:347: [DEBUG]   Only:
10:24:32 config.go:348: [DEBUG]   IgnoreModules:
10:24:32 config.go:352: [DEBUG]   Rules:
10:24:32 config.go:354: [DEBUG]     terraform_required_providers: true
10:24:32 config.go:354: [DEBUG]     terraform_standard_module_structure: false
10:24:32 config.go:354: [DEBUG]     terraform_deprecated_interpolation: true
10:24:32 config.go:354: [DEBUG]     terraform_deprecated_index: true
10:24:32 config.go:354: [DEBUG]     terraform_documented_outputs: true
10:24:32 config.go:354: [DEBUG]     terraform_typed_variables: true
10:24:32 config.go:354: [DEBUG]     terraform_module_pinned_source: true
10:24:32 config.go:354: [DEBUG]     terraform_naming_convention: true
10:24:32 config.go:354: [DEBUG]     terraform_required_version: true
10:24:32 config.go:354: [DEBUG]     terraform_unused_required_providers: true
10:24:32 config.go:354: [DEBUG]     terraform_unused_declarations: true
10:24:32 config.go:354: [DEBUG]     terraform_comment_syntax: true
10:24:32 config.go:354: [DEBUG]     terraform_documented_variables: true
10:24:32 config.go:356: [DEBUG]   Plugins:
10:24:32 config.go:358: [DEBUG]     azurerm: enabled=true, version=0.28.0, source=github.com/terraform-linters/tflint-ruleset-azurerm
10:24:32 config.go:463: [INFO] The "terraform" plugin block is not found. Enable the plugin "terraform" automatically
10:24:32 option.go:77: [DEBUG] CLI Options
10:24:32 option.go:78: [DEBUG]   CallModuleType: local
10:24:32 option.go:79: [DEBUG]   Force: false
10:24:32 option.go:80: [DEBUG]   Format:
10:24:32 option.go:81: [DEBUG]   Varfiles:
10:24:32 option.go:82: [DEBUG]   Variables:
10:24:32 option.go:83: [DEBUG]   EnableRules:
10:24:32 option.go:84: [DEBUG]   DisableRules:
10:24:32 option.go:85: [DEBUG]   Only:
10:24:32 option.go:86: [DEBUG]   EnablePlugins:
10:24:32 option.go:87: [DEBUG]   IgnoreModules:
10:24:32 loader.go:39: [INFO] Initialize new loader
10:24:32 module_mgr.go:63: [INFO] Module manifest file found. Initializing...
10:24:32 loader.go:81: [INFO] Building the root module while calling local child modules...
10:24:32 runner.go:46: [INFO] Initialize new runner for root
10:24:32 discovery.go:33: [INFO] Plugin "terraform" is not installed, but the bundled plugin is available.
10:24:32 discovery.go:54: [INFO] Plugin "terraform" found
10:24:32 [DEBUG] cmdrunner/cmd_runner.go:73: starting plugin: path=/opt/homebrew/bin//tflint args=["/opt/homebrew/bin//tflint", "--act-as-bundled-plugin"]
10:24:32 [DEBUG] cmdrunner/cmd_runner.go:80: plugin started: path=/opt/homebrew/bin//tflint pid=98507
10:24:32 [DEBUG] go-plugin@v1.6.3/client.go:827: waiting for RPC address: plugin=/opt/homebrew/bin//tflint
10:24:32 [DEBUG] go-plugin@v1.6.3/client.go:880: using plugin: version=11
10:24:32 [DEBUG] go-plugin@v1.6.3/client.go:1216: tflint: 10:24:32 [DEBUG] go-plugin@v1.6.3/server.go:419: plugin address: network=unix address=/var/folders/8y/z7ynp69j6b1_crfssjxc00f00000gn/T/plugin2024212603
10:24:32 discovery.go:90: [DEBUG] Find plugin path: /Users/jma/.tflint.d/plugins/github.com/terraform-linters/tflint-ruleset-azurerm/0.28.0/tflint-ruleset-azurerm
10:24:32 discovery.go:54: [INFO] Plugin "azurerm" found
10:24:32 [DEBUG] cmdrunner/cmd_runner.go:73: starting plugin: path=/Users/jma/.tflint.d/plugins/github.com/terraform-linters/tflint-ruleset-azurerm/0.28.0/tflint-ruleset-azurerm args=["/Users/jma/.tflint.d/plugins/github.com/terraform-linters/tflint-ruleset-azurerm/0.28.0/tflint-ruleset-azurerm"]
10:24:32 [DEBUG] cmdrunner/cmd_runner.go:80: plugin started: path=/Users/jma/.tflint.d/plugins/github.com/terraform-linters/tflint-ruleset-azurerm/0.28.0/tflint-ruleset-azurerm pid=98508
10:24:32 [DEBUG] go-plugin@v1.6.3/client.go:827: waiting for RPC address: plugin=/Users/jma/.tflint.d/plugins/github.com/terraform-linters/tflint-ruleset-azurerm/0.28.0/tflint-ruleset-azurerm
10:24:32 [DEBUG] go-plugin@v1.6.3/client.go:1216: tflint-ruleset-azurerm: 10:24:32 [DEBUG] go-plugin@v1.6.2/server.go:419: plugin address: network=unix address=/var/folders/8y/z7ynp69j6b1_crfssjxc00f00000gn/T/plugin3389187582
10:24:32 [DEBUG] go-plugin@v1.6.3/client.go:880: using plugin: version=11
10:24:32 [DEBUG] host2plugin/client.go:124: starting host-side gRPC server
10:24:32 [DEBUG] go-plugin@v1.6.3/client.go:1216: tflint: 10:24:32 [ERROR] interceptor/logging.go:18: failed to gRPC request: direction=host2plugin method=/proto.RuleSet/Check err="rpc error: code = Aborted desc = failed to check \"terraform_required_providers\" rule: m-defender.tf:10,15-41: Invalid expression; A single static variable reference is required: only attribute access and indexing with constant keys. No calculations, function calls, template expressions, etc are allowed here."
10:24:32 [DEBUG] go-plugin@v1.6.3/grpc_stdio.go:142: stdio: received EOF, stopping recv loop: err="rpc error: code = Unavailable desc = error reading from server: EOF"
10:24:32 [INFO]  go-plugin@v1.6.3/client.go:780: plugin process exited: plugin=/opt/homebrew/bin//tflint id=98507
10:24:32 [DEBUG] go-plugin@v1.6.3/client.go:558: plugin exited
10:24:32 [DEBUG] go-plugin@v1.6.3/grpc_stdio.go:142: stdio: received EOF, stopping recv loop: err="rpc error: code = Unavailable desc = error reading from server: EOF"
10:24:32 [INFO]  go-plugin@v1.6.3/client.go:780: plugin process exited: plugin=/Users/jma/.tflint.d/plugins/github.com/terraform-linters/tflint-ruleset-azurerm/0.28.0/tflint-ruleset-azurerm id=98508
10:24:32 [DEBUG] go-plugin@v1.6.3/client.go:558: plugin exited
Failed to check ruleset; failed to check "terraform_required_providers" rule: m-defender.tf:10,15-41: Invalid expression; A single static variable reference is required: only attribute access and indexing with constant keys. No calculations, function calls, template expressions, etc are allowed here.

TFLint Version

0.57.0

Terraform Version

1.9.1

Operating System

• Linux
• macOS
• Windows

[wata727]

Unfortunately, TFLint does not support OpenTofu now.