What

Replace || with a ternary in the proxy_client_password_auth_type variable validation to prevent contains() from receiving a null argument.

Why

On OpenTofu <1.10 (confirmed on v1.9.1), the || operator does not short-circuit evaluation. When proxy_client_password_auth_type is null (the default), both sides of the || are evaluated, and contains() receives null as its second argument, causing:

Error: Invalid function argument

  on variables.tf line 549, in variable "proxy_client_password_auth_type":
    │ while calling contains(list, value)
    │ var.proxy_client_password_auth_type is null

Invalid value for "value" parameter: argument must not be null.

This means any user on OpenTofu <1.10 who has not set proxy_client_password_auth_type will hit a plan failure with the current default of null.

Fix

- condition = var.proxy_client_password_auth_type == null || contains([...], var.proxy_client_password_auth_type)
+ condition = var.proxy_client_password_auth_type == null ? true : contains([...], var.proxy_client_password_auth_type)

The ternary guarantees contains() is never called when the value is null.

Generated with Claude Opus 4.6