variable validation: || does not short-circuit

Author: Kosta Welke

modules/workload-identity/variables.tf

@@ -121,7 +121,7 @@ variable "gcp_sa_display_name" {
   default     = null
 
   validation {
-    condition     = length(var.gcp_sa_display_name) <= 100
+    condition     = var.gcp_sa_display_name == null ? true : length(var.gcp_sa_display_name) <= 100
     error_message = "The Google service account display name must be at most 100 characters"
   }
 }
@@ -133,7 +133,7 @@ variable "gcp_sa_description" {
   default     = null
 
   validation {
-    condition     = length(var.gcp_sa_description) <= 256
+    condition     = var.gcp_sa_description == null ? true : length(var.gcp_sa_description) <= 256
     error_message = "The Google service account display name must be at most 100 characters"
   }
 }