Terraform Validate Crashing with Action

[lavahot]

Terraform Version

Terraform v1.14.8
on darwin_arm64
+ provider registry.terraform.io/f5networks/bigip v1.26.0
+ provider registry.terraform.io/hashicorp/tls v4.2.1
+ provider registry.terraform.io/paloaltonetworks/panos v2.0.10
+ provider registry.terraform.io/vancluever/acme v2.46.0

Terraform Configuration Files

action "panos_commit" "commit" {
  admins      = ["<censored TF username>"]
  description = "Commit changes after certificate import"

  templates = [
    data.panos_template.censored_template.name
  ]
}

data "panos_template" "censored_template" {
  name = "<censored existing template name>"

  location = {
    panorama = {
      panorama_device = var.panos_panorama_device_name
    }
  }
  lifecycle {
    action_trigger {
      actions = [panos_commit.commit]
      events  = [after_create, after_update]
    }
  }
}

Debug Output

2026-04-17T16:03:29.839-0700 [INFO]  Terraform version: 1.14.8
2026-04-17T16:03:29.839-0700 [DEBUG] using github.com/hashicorp/go-tfe v1.94.0
2026-04-17T16:03:29.839-0700 [DEBUG] using github.com/hashicorp/hcl/v2 v2.24.0
2026-04-17T16:03:29.839-0700 [DEBUG] using github.com/hashicorp/terraform-svchost v0.1.1
2026-04-17T16:03:29.839-0700 [DEBUG] using github.com/zclconf/go-cty v1.16.3
2026-04-17T16:03:29.839-0700 [INFO]  Go runtime version: go1.25.8
2026-04-17T16:03:29.839-0700 [INFO]  CLI args: []string{"/opt/homebrew/Cellar/tfenv/3.0.0/versions/1.14.8/terraform", "validate"}
2026-04-17T16:03:29.839-0700 [TRACE] Stdout is a terminal of width 223
2026-04-17T16:03:29.839-0700 [TRACE] Stderr is a terminal of width 223
2026-04-17T16:03:29.839-0700 [TRACE] Stdin is a terminal
2026-04-17T16:03:29.839-0700 [DEBUG] Attempting to open CLI config file: /Users/tmansfield/.terraformrc
2026-04-17T16:03:29.839-0700 [DEBUG] File doesn't exist, but doesn't need to. Ignoring.
2026-04-17T16:03:29.839-0700 [DEBUG] ignoring non-existing provider search directory terraform.d/plugins
2026-04-17T16:03:29.839-0700 [DEBUG] ignoring non-existing provider search directory /Users/tmansfield/.terraform.d/plugins
2026-04-17T16:03:29.839-0700 [DEBUG] ignoring non-existing provider search directory /Users/tmansfield/Library/Application Support/io.terraform/plugins
2026-04-17T16:03:29.839-0700 [DEBUG] ignoring non-existing provider search directory /Library/Application Support/io.terraform/plugins
2026-04-17T16:03:29.839-0700 [INFO]  CLI command args: []string{"validate"}

!!!!!!!!!!!!!!!!!!!!!!!!!!! TERRAFORM CRASH !!!!!!!!!!!!!!!!!!!!!!!!!!!!

Terraform crashed! This is always indicative of a bug within Terraform.
Please report the crash with Terraform[1] so that we can fix this.

When reporting bugs, please include your terraform version, the stack trace
shown below, and any additional information which may help replicate the issue.

[1]: https://github.com/hashicorp/terraform/issues

!!!!!!!!!!!!!!!!!!!!!!!!!!! TERRAFORM CRASH !!!!!!!!!!!!!!!!!!!!!!!!!!!!

panic: unexpected lifecycle sub-block type "action_trigger"
goroutine 1 [running]:
runtime/debug.Stack()
        runtime/debug/stack.go:26 +0x64
github.com/hashicorp/terraform/internal/logging.PanicHandler()
        github.com/hashicorp/terraform/internal/logging/panic.go:84 +0x16c
panic({0x1033bcda0?, 0x140001b8950?})
        runtime/panic.go:783 +0x120
github.com/hashicorp/terraform/internal/configs.decodeDataBlock(0x14000761040, 0x0, 0x0)
        github.com/hashicorp/terraform/internal/configs/resource.go:691 +0x1864
github.com/hashicorp/terraform/internal/configs.parseConfigFile({0x103c52070, 0x14000739340}, {0x0, 0x0, 0x0}, 0x0, 0x0)
        github.com/hashicorp/terraform/internal/configs/parser_config.go:219 +0x2f0
github.com/hashicorp/terraform/internal/configs.(*Parser).loadConfigFile(0x140005d83e0, {0x14000782690?, 0x0?}, 0x0)
        github.com/hashicorp/terraform/internal/configs/parser_config.go:84 +0x3c
github.com/hashicorp/terraform/internal/configs.(*Parser).LoadConfigFile(...)
        github.com/hashicorp/terraform/internal/configs/parser_config.go:25
github.com/hashicorp/terraform/internal/configs.(*Parser).loadFiles(0x140005d83e0, {0x14000733600?, 0x19?, 0x0?}, 0x0)
        github.com/hashicorp/terraform/internal/configs/parser_config_dir.go:171 +0xd4
github.com/hashicorp/terraform/internal/configs.(*Parser).LoadConfigDir(0x140005d83e0, {0x140000744a0, 0x19}, {0x0?, 0x1?, 0x1002b120c?})
        github.com/hashicorp/terraform/internal/configs/parser_config_dir.go:54 +0xcc
github.com/hashicorp/terraform/internal/configs/configload.(*Loader).moduleWalkerLoad(0x140005de000, 0x1400074afc0)
        github.com/hashicorp/terraform/internal/configs/configload/loader_load.go:120 +0x3d8
github.com/hashicorp/terraform/internal/configs.ModuleWalkerFunc.LoadModule(0x10?, 0x1033bcda0?)
        github.com/hashicorp/terraform/internal/configs/config_build.go:298 +0x28
github.com/hashicorp/terraform/internal/configs.loadModule(0x14000723340, 0x1400074afc0, {0x103c0c4a0, 0x140001b93f0})
        github.com/hashicorp/terraform/internal/configs/config_build.go:190 +0x3c
github.com/hashicorp/terraform/internal/configs.buildChildModules(0x14000756b60, {0x103c0c4a0, 0x140001b93f0})
        github.com/hashicorp/terraform/internal/configs/config_build.go:173 +0x32c
github.com/hashicorp/terraform/internal/configs.loadModule(0x14000723340, 0x140005e7c20, {0x103c0c4a0, 0x140001b93f0})
        github.com/hashicorp/terraform/internal/configs/config_build.go:210 +0x204
github.com/hashicorp/terraform/internal/configs.buildChildModules(0x14000723340, {0x103c0c4a0, 0x140001b93f0})
        github.com/hashicorp/terraform/internal/configs/config_build.go:173 +0x32c
github.com/hashicorp/terraform/internal/configs.BuildConfig(0x140005e7b00, {0x103c0c4a0, 0x140001b93f0}, {0x103c0c520, 0x140001b9400})
        github.com/hashicorp/terraform/internal/configs/config_build.go:34 +0x70
github.com/hashicorp/terraform/internal/configs/configload.(*Loader).loadConfig(0x140005de000, 0x140005e7b00, {0x0, 0x0, 0x0})
        github.com/hashicorp/terraform/internal/configs/configload/loader_load.go:46 +0x13c
github.com/hashicorp/terraform/internal/configs/configload.(*Loader).LoadConfigWithTests(0x140005de000, {0x10312d2f8, 0x1}, {0x102a83c65, 0x5})
        github.com/hashicorp/terraform/internal/configs/configload/loader_load.go:32 +0x120
github.com/hashicorp/terraform/internal/command.(*Meta).loadConfigWithTests(0x14000502a80, {0x140005da050?, 0x1400059f858?}, {0x102a83c65, 0x5})
        github.com/hashicorp/terraform/internal/command/meta_config.go:68 +0x9c
github.com/hashicorp/terraform/internal/command.(*ValidateCommand).validate(0x14000502a80, {0x140005da050?, 0x0?})
        github.com/hashicorp/terraform/internal/command/validate.go:82 +0x4c
github.com/hashicorp/terraform/internal/command.(*ValidateCommand).Run(0x14000502a80, {0x140000700f0, 0x0, 0x0})
        github.com/hashicorp/terraform/internal/command/validate.go:60 +0x3b4
github.com/hashicorp/cli.(*CLI).Run(0x140005ba280)
        github.com/hashicorp/cli@v1.1.7/cli.go:265 +0x420
main.realMain()
        github.com/hashicorp/terraform/main.go:339 +0x1784
main.main()
        github.com/hashicorp/terraform/main.go:64 +0x1c

Expected Behavior

Should have validated.

Actual Behavior

!!!!!!!!!!!!!!!!!!!!!!!!!!! TERRAFORM CRASH !!!!!!!!!!!!!!!!!!!!!!!!!!!!

Terraform crashed! This is always indicative of a bug within Terraform.
Please report the crash with Terraform1 so that we can fix this.

When reporting bugs, please include your terraform version, the stack trace
shown below, and any additional information which may help replicate the issue.

!!!!!!!!!!!!!!!!!!!!!!!!!!! TERRAFORM CRASH !!!!!!!!!!!!!!!!!!!!!!!!!!!!

panic: unexpected lifecycle sub-block type "action_trigger"
goroutine 1 [running]:
runtime/debug.Stack()
runtime/debug/stack.go:26 +0x64
github.com/hashicorp/terraform/internal/logging.PanicHandler()
github.com/hashicorp/terraform/internal/logging/panic.go:84 +0x16c
panic({0x103bbcda0?, 0x1400036d5b0?})
runtime/panic.go:783 +0x120
github.com/hashicorp/terraform/internal/configs.decodeDataBlock(0x14000631d40, 0x0, 0x0)
github.com/hashicorp/terraform/internal/configs/resource.go:691 +0x1864
github.com/hashicorp/terraform/internal/configs.parseConfigFile({0x104452070, 0x1400089b340}, {0x0, 0x0, 0x0}, 0x0, 0x0)
github.com/hashicorp/terraform/internal/configs/parser_config.go:219 +0x2f0
github.com/hashicorp/terraform/internal/configs.(*Parser).loadConfigFile(0x140004ed240, {0x1400029c7b0?, 0x0?}, 0x0)
github.com/hashicorp/terraform/internal/configs/parser_config.go:84 +0x3c
github.com/hashicorp/terraform/internal/configs.(*Parser).LoadConfigFile(...)
github.com/hashicorp/terraform/internal/configs/parser_config.go:25
github.com/hashicorp/terraform/internal/configs.(*Parser).loadFiles(0x140004ed240, {0x140006f2040?, 0x19?, 0x0?}, 0x0)
github.com/hashicorp/terraform/internal/configs/parser_config_dir.go:171 +0xd4
github.com/hashicorp/terraform/internal/configs.(*Parser).LoadConfigDir(0x140004ed240, {0x14000074480, 0x19}, {0x0?, 0x1?, 0x6ff762?})
github.com/hashicorp/terraform/internal/configs/parser_config_dir.go:54 +0xcc
github.com/hashicorp/terraform/internal/configs/configload.(*Loader).moduleWalkerLoad(0x140000a4240, 0x14000a18000)
github.com/hashicorp/terraform/internal/configs/configload/loader_load.go:120 +0x3d8
github.com/hashicorp/terraform/internal/configs.ModuleWalkerFunc.LoadModule(0x14000886d88?, 0x100ac10ec?)
github.com/hashicorp/terraform/internal/configs/config_build.go:298 +0x28
github.com/hashicorp/terraform/internal/configs.loadModule(0x14000745340, 0x14000a18000, {0x10440c4a0, 0x140003df7e0})
github.com/hashicorp/terraform/internal/configs/config_build.go:190 +0x3c
github.com/hashicorp/terraform/internal/configs.buildChildModules(0x14000a10000, {0x10440c4a0, 0x140003df7e0})
github.com/hashicorp/terraform/internal/configs/config_build.go:173 +0x32c
github.com/hashicorp/terraform/internal/configs.loadModule(0x14000745340, 0x14000715c20, {0x10440c4a0, 0x140003df7e0})
github.com/hashicorp/terraform/internal/configs/config_build.go:210 +0x204
github.com/hashicorp/terraform/internal/configs.buildChildModules(0x14000745340, {0x10440c4a0, 0x140003df7e0})
github.com/hashicorp/terraform/internal/configs/config_build.go:173 +0x32c
github.com/hashicorp/terraform/internal/configs.BuildConfig(0x14000715b00, {0x10440c4a0, 0x140003df7e0}, {0x10440c520, 0x140003df7f0})
github.com/hashicorp/terraform/internal/configs/config_build.go:34 +0x70
github.com/hashicorp/terraform/internal/configs/configload.(*Loader).loadConfig(0x140000a4240, 0x14000715b00, {0x0, 0x0, 0x0})
github.com/hashicorp/terraform/internal/configs/configload/loader_load.go:46 +0x13c
github.com/hashicorp/terraform/internal/configs/configload.(*Loader).LoadConfigWithTests(0x140000a4240, {0x10392d2f8, 0x1}, {0x103283c65, 0x5})
github.com/hashicorp/terraform/internal/configs/configload/loader_load.go:32 +0x120
github.com/hashicorp/terraform/internal/command.(*Meta).loadConfigWithTests(0x14000427340, {0x1400070a050?, 0x140004e9858?}, {0x103283c65, 0x5})
github.com/hashicorp/terraform/internal/command/meta_config.go:68 +0x9c
github.com/hashicorp/terraform/internal/command.(*ValidateCommand).validate(0x14000427340, {0x1400070a050?, 0x0?})
github.com/hashicorp/terraform/internal/command/validate.go:82 +0x4c
github.com/hashicorp/terraform/internal/command.(*ValidateCommand).Run(0x14000427340, {0x140000700f0, 0x0, 0x0})
github.com/hashicorp/terraform/internal/command/validate.go:60 +0x3b4
github.com/hashicorp/cli.(*CLI).Run(0x140004f2280)
github.com/hashicorp/cli@v1.1.7/cli.go:265 +0x420
main.realMain()
github.com/hashicorp/terraform/main.go:339 +0x1784
main.main()
github.com/hashicorp/terraform/main.go:64 +0x1c

Steps to Reproduce

1. terraform validate

Additional Context

When the action has any arguments, a crash occurs. With no arguments, validation succeeds.

References

No response

Generative AI / LLM assisted development?

No response

[lavahot]

I just realized this is a pretty stupid thing I've done. There's no reason for me to trigger an action based on a data source. Don't code tired, kids. But it should still not crash TF.

[DanielMSchmidt]

Yeah, this should fail during parsing already