Question

我有一个使用terraform构建的RDS集群，当前正在运行删除保护。

当我更新terraform脚本以进行某些更改（例如更改安全组）并将其运行到环境中时，它总是会尝试崩溃并重建RDS集群。

现在使用删除保护运行此操作会停止重建，但会导致terraform应用失败，因为它无法破坏群集。

如何获取此信息以保留现有RDS群集，而无需每次运行脚本时都进行重建？

`resource "aws_rds_cluster" "env-cluster" {
  cluster_identifier      = "mysql-env-cluster"
  engine                  = "aurora-mysql"
  engine_version          = "5.7.mysql_aurora.2.03.2"
  availability_zones      = ["${var.aws_az1}", "${var.aws_az2}"]
  db_subnet_group_name   = "${aws_db_subnet_group.env-rds-subg.name}"
  database_name           = "dbname"
  master_username         = "${var.db-user}"
  master_password         = "${var.db-pass}"
  backup_retention_period = 5
  preferred_backup_window = "22:00-23:00"
  deletion_protection     = true
  skip_final_snapshot     = true
 }

resource "aws_rds_cluster_instance" "env-01" {
  identifier              = "${var.env-db-01}"
  cluster_identifier      = "${aws_rds_cluster.env-cluster.id}"
  engine                  = "aurora-mysql"
  engine_version          = "5.7.mysql_aurora.2.03.2"
  instance_class          = "db.t2.small"
  apply_immediately       = true
}

resource "aws_rds_cluster_instance" "env-02" {
  identifier              = "${var.env-db-02}"
  cluster_identifier      = "${aws_rds_cluster.env-cluster.id}"
  engine                  = "aurora-mysql"
  engine_version          = "5.7.mysql_aurora.2.03.2"
  instance_class          = "db.t2.small"
  apply_immediately       = true
}

resource "aws_rds_cluster_endpoint" "env-02-ep" {
  cluster_identifier          = "${aws_rds_cluster.env-cluster.id}"
  cluster_endpoint_identifier = "reader"
  custom_endpoint_type        = "READER"

  excluded_members = ["${aws_rds_cluster_instance.env-01.id}"]
}`

AWS Terraform尝试销毁和重建RDS集群

0 个答案: