使用Terraform random_id创建多个无法正常工作的资源

时间：2019-01-26 19:39:09

标签： azure azure-storage terraform terraform-provider-azure

我试图结合使用random_id属性和count元属性来创建多个具有唯一名称的Azure存储帐户。

配置代码： 

# Create storage accounts

resource "random_id" "storage_account_name_unique" {
  byte_length = 8
}

resource "azurerm_storage_account" "storage" {
  count                    = "${var.storage_account_count}"
  name                     = "tfsta${lower(random_id.storage_account_name_unique.hex)}"
  resource_group_name      = "${azurerm_resource_group.rg.name}"
  location                 = "${azurerm_resource_group.rg.location}"
  account_kind             = "StorageV2"
  account_tier             = "Standard"
  access_tier              = "Hot"
  account_replication_type = "${var.account_replication_type}"

  network_rules {
    ip_rules                   = ["127.0.0.1"]
    virtual_network_subnet_ids = ["${azurerm_subnet.subnet.id}"] 
  }

  tags = "${var.tags}"
  }

此代码出现问题：

  1. Terraform仅生成一个random_id，并将其用于在Terraform Apply操作期间创建的所有存储帐户实例。
  2. Terraform被“骗了”，以为它创建了多个存储帐户，但是只创建了一个存储帐户

选定的地形应用输出：

此输出显示Terraform认为它正在使用相同的random_id创建三个单独的存储帐户。该计划已成功应用，但在Azure中仅创建了一个存储帐户。

random_id.storage_account_name_unique: Creating...
  b64:         "" => "<computed>"
  b64_std:     "" => "<computed>"
  b64_url:     "" => "<computed>"
  byte_length: "" => "8"
  dec:         "" => "<computed>"
  hex:         "" => "<computed>"
random_id.storage_account_name_unique: Creation complete after 0s (ID: kYl9WvpTSso)

azurerm_storage_account.storage[2]: Creating...
  access_tier:                                           "" => "Hot"
  account_encryption_source:                             "" => "Microsoft.Storage"
  account_kind:                                          "" => "StorageV2"
  account_replication_type:                              "" => "LRS"
  account_tier:                                          "" => "Standard"
  enable_blob_encryption:                                "" => "true"
  enable_file_encryption:                                "" => "true"
  identity.#:                                            "" => "<computed>"
  location:                                              "" => "westus2"
  name:                                                  "" => "tfsta91897d5afa534aca"
  network_rules.#:                                       "" => "1"
  network_rules.0.bypass.#:                              "" => "<computed>"
  network_rules.0.ip_rules.#:                            "" => "1"
  network_rules.0.ip_rules.3619153832:                   "" => "127.0.0.1"
  network_rules.0.virtual_network_subnet_ids.#:          "" => "1"
  network_rules.0.virtual_network_subnet_ids.3223410521: "" => "/subscriptions/f6d69ee2-34d5-4ca8-a143-7a2fc1aeca55/resourceGroups/hdi-dev-rg/providers/Microsoft.Network/virtualNetworks/hdi-dev-vnet/subnets/hdinsight"
  primary_access_key:                                    "<sensitive>" => "<sensitive>"
  primary_blob_connection_string:                        "<sensitive>" => "<sensitive>"
  primary_blob_endpoint:                                 "" => "<computed>"
  primary_connection_string:                             "<sensitive>" => "<sensitive>"
  primary_file_endpoint:                                 "" => "<computed>"
  primary_location:                                      "" => "<computed>"
  primary_queue_endpoint:                                "" => "<computed>"
  primary_table_endpoint:                                "" => "<computed>"
  resource_group_name:                                   "" => "hdi-dev-rg"
  secondary_access_key:                                  "<sensitive>" => "<sensitive>"
  secondary_blob_connection_string:                      "<sensitive>" => "<sensitive>"
  secondary_blob_endpoint:                               "" => "<computed>"
  secondary_connection_string:                           "<sensitive>" => "<sensitive>"
  secondary_location:                                    "" => "<computed>"
  secondary_queue_endpoint:                              "" => "<computed>"
  secondary_table_endpoint:                              "" => "<computed>"
  tags.%:                                                "" => "3"
  tags.costcenter:                                       "" => "Unknown"
  tags.environment:                                      "" => "Dev"
  tags.project:                                          "" => "Unknown"
azurerm_storage_account.storage[1]: Creating...
  access_tier:                                           "" => "Hot"
  account_encryption_source:                             "" => "Microsoft.Storage"
  account_kind:                                          "" => "StorageV2"
  account_replication_type:                              "" => "LRS"
  account_tier:                                          "" => "Standard"
  enable_blob_encryption:                                "" => "true"
  enable_file_encryption:                                "" => "true"
  identity.#:                                            "" => "<computed>"
  location:                                              "" => "westus2"
  name:                                                  "" => "tfsta91897d5afa534aca"
  network_rules.#:                                       "" => "1"
  network_rules.0.bypass.#:                              "" => "<computed>"
  network_rules.0.ip_rules.#:                            "" => "1"
  network_rules.0.ip_rules.3619153832:                   "" => "127.0.0.1"
  network_rules.0.virtual_network_subnet_ids.#:          "" => "1"
  network_rules.0.virtual_network_subnet_ids.3223410521: "" => "/subscriptions/f6d69ee2-34d5-4ca8-a143-7a2fc1aeca55/resourceGroups/hdi-dev-rg/providers/Microsoft.Network/virtualNetworks/hdi-dev-vnet/subnets/hdinsight"
  primary_access_key:                                    "<sensitive>" => "<sensitive>"
  primary_blob_connection_string:                        "<sensitive>" => "<sensitive>"
  primary_blob_endpoint:                                 "" => "<computed>"
  primary_connection_string:                             "<sensitive>" => "<sensitive>"
  primary_file_endpoint:                                 "" => "<computed>"
  primary_location:                                      "" => "<computed>"
  primary_queue_endpoint:                                "" => "<computed>"
  primary_table_endpoint:                                "" => "<computed>"
  resource_group_name:                                   "" => "hdi-dev-rg"
  secondary_access_key:                                  "<sensitive>" => "<sensitive>"
  secondary_blob_connection_string:                      "<sensitive>" => "<sensitive>"
  secondary_blob_endpoint:                               "" => "<computed>"
  secondary_connection_string:                           "<sensitive>" => "<sensitive>"
  secondary_location:                                    "" => "<computed>"
  secondary_queue_endpoint:                              "" => "<computed>"
  secondary_table_endpoint:                              "" => "<computed>"
  tags.%:                                                "" => "3"
  tags.costcenter:                                       "" => "Unknown"
  tags.environment:                                      "" => "Dev"
  tags.project:                                          "" => "Unknown"
azurerm_storage_account.storage[0]: Creating...
  access_tier:                                           "" => "Hot"
  account_encryption_source:                             "" => "Microsoft.Storage"
  account_kind:                                          "" => "StorageV2"
  account_replication_type:                              "" => "LRS"
  account_tier:                                          "" => "Standard"
  enable_blob_encryption:                                "" => "true"
  enable_file_encryption:                                "" => "true"
  identity.#:                                            "" => "<computed>"
  location:                                              "" => "westus2"
  name:                                                  "" => "tfsta91897d5afa534aca"
  network_rules.#:                                       "" => "1"
  network_rules.0.bypass.#:                              "" => "<computed>"
  network_rules.0.ip_rules.#:                            "" => "1"
  network_rules.0.ip_rules.3619153832:                   "" => "127.0.0.1"
  network_rules.0.virtual_network_subnet_ids.#:          "" => "1"
  network_rules.0.virtual_network_subnet_ids.3223410521: "" => "/subscriptions/f6d69ee2-34d5-4ca8-a143-7a2fc1aeca55/resourceGroups/hdi-dev-rg/providers/Microsoft.Network/virtualNetworks/hdi-dev-vnet/subnets/hdinsight"
  primary_access_key:                                    "<sensitive>" => "<sensitive>"
  primary_blob_connection_string:                        "<sensitive>" => "<sensitive>"
  primary_blob_endpoint:                                 "" => "<computed>"
  primary_connection_string:                             "<sensitive>" => "<sensitive>"
  primary_file_endpoint:                                 "" => "<computed>"
  primary_location:                                      "" => "<computed>"
  primary_queue_endpoint:                                "" => "<computed>"
  primary_table_endpoint:                                "" => "<computed>"
  resource_group_name:                                   "" => "hdi-dev-rg"
  secondary_access_key:                                  "<sensitive>" => "<sensitive>"
  secondary_blob_connection_string:                      "<sensitive>" => "<sensitive>"
  secondary_blob_endpoint:                               "" => "<computed>"
  secondary_connection_string:                           "<sensitive>" => "<sensitive>"
  secondary_location:                                    "" => "<computed>"
  secondary_queue_endpoint:                              "" => "<computed>"
  secondary_table_endpoint:                              "" => "<computed>"
  tags.%:                                                "" => "3"
  tags.costcenter:                                       "" => "Unknown"
  tags.environment:                                      "" => "Dev"
  tags.project:                                          "" => "Unknown"
azurerm_storage_account.storage[0]: Creation complete after 21s (ID: /subscriptions/f6d69ee2-34d5-4ca8-a143-.../storageAccounts/tfsta91897d5afa534aca)
azurerm_storage_account.storage[2]: Creation complete after 22s (ID: /subscriptions/f6d69ee2-34d5-4ca8-a143-.../storageAccounts/tfsta91897d5afa534aca)
azurerm_storage_account.storage[1]: Creation complete after 23s (ID: /subscriptions/f6d69ee2-34d5-4ca8-a143-.../storageAccounts/tfsta91897d5afa534aca)

2 个答案:

答案 0 :(得分：1)

这里的问题是您对随机字符串的使用，您只创建了一个字符串，并在每个名称中重复使用了相同的字符串。 如果要将随机字符串元素作为存储帐户名称的一部分，则需要多个随机字符串。下面的示例演示了如何在资源中使用和创建多个随机字符串。

resource "random_id" "storage_account_name_unique" {
  count = "${var.storage_account_count}"
  byte_length = 8
}

output "random"{
value=["${random_id.storage_account_name_unique.*.hex}"]
}

provider "random" {
  version="2.0"
}

resource "null_resource" "echo" {
  count = "${var.storage_account_count}"
  provisioner "local-exec" {     
    command = 
      "echo ${element(random_id.storage_account_name_unique.*.hex, count.index)}"
  }
}

这给您：

null_resource.echo[0]: Creating...
null_resource.echo[1]: Creating...
null_resource.echo[0]: Provisioning with 'local-exec'...
null_resource.echo[1]: Provisioning with 'local-exec'...
null_resource.echo[1] (local-exec): Executing: ["cmd" "/C" "echo e5ddcf9fb82798f2"]
null_resource.echo[0] (local-exec): Executing: ["cmd" "/C" "echo ceb231a41c8cdb24"]
null_resource.echo[1] (local-exec): e5ddcf9fb82798f2
null_resource.echo[0] (local-exec): ceb231a41c8cdb24
null_resource.echo[1]: Creation complete after 0s (ID: 3289535031294242492)
null_resource.echo[0]: Creation complete after 0s (ID: 4611439113584915035)

Apply complete! Resources: 2 added, 0 changed, 0 destroyed.

Outputs:

random = [
    ceb231a41c8cdb24,
    e5ddcf9fb82798f2
]

答案 1 :(得分：0)

我认为无论使用Terraform还是Azure REST API创建存储帐户，问题都是相同的。它显示在Azure REST API - Create中：

  

使用指定的时间异步创建一个新的存储帐户   参数。如果已经创建了帐户并随后进行了创建   发出具有不同属性的请求，帐户属性   将会被更新。如果已经创建一个帐户，并且随后   创建或更新请求的发布完全相同   属性，请求将成功。

因此，当它创建第一个存储帐户时，该操作照常进行。但是随后的同名创建将遵循上述规则。最后，仅保留一个具有相同名称的存储帐户。如果要创建多个存储帐户，则应使用其他名称。

相关问题
最新问题