个人中心
gpt4 book ai didi

Creating azurerm_virtual_network_gateway_connection with terraform from a complex map object(从复杂地图对象使用terraform创建azurerm_虚拟_网络_网关_连接)

转载 作者：bug小助手 更新时间：2023-10-24 19:02:03 24 4
gpt4 key购买 nike



I need a bit of help, trying to create a site-to-site vpn is Azure.
This is the map I am using to define it:

我需要一点帮助，试图创建一个站点到站点VPN是Azure。这是我用来定义它的地图：




  local_network_gateways = {
    vpn1 = { 
      lng_gateway_address = "193.176.222.22", 
      lng_address_space = ["10.18.0.0/16"], 
      enabled = true,
      connections = [
        {
          name             = "vpn1-connection1",
          connection_type  = "VNet2VNet",
          vpn_shared_key   = "somegibetrrish",
          enabled          = true
        },
        {
          name             = "vpn1-connection2",
          connection_type  = "IPsec",
          vpn_shared_key   = "somegiberrish",
          enabled          = true
        }
      ]
    },
    vpn2 = { 
      lng_gateway_address = "194.176.223.23", 
      lng_address_space = ["12.44.0.0/16"], 
      enabled = true,
      connections = [
        {
          name             = "vpn2-connection1"
          connection_type  = "IPsec"
          vpn_shared_key   = "vpn2_somegibetrrish"
          enabled          = true
        }
      ]
    }
  }




And I need to understand the nested for_each loops I need to build, in order to create as many azurerm_virtual_network_gateway_connection resources as I have connections, for each of the local_network_gateways.

我还需要了解我需要构建的嵌套for_each循环，以便为每个本地网络网关创建与我拥有的连接一样多的azurerm_VPN_Network_Gateway_Connection资源。


For the local variable above, the loop should help me create 3 azurerm_virtual_network_gateway_connection, but each of them should be connected to the proper local_network_gateway_id

对于上面的本地变量，循环应该帮助我创建3个azurerm_虚拟_网络_网关_连接，但它们中的每个都应该连接到正确的本地网络_网关_id




resource "azurerm_local_network_gateway" "lng_prod" {
  for_each = { 
    for key, value in var.local_network_gateways : key => value
    if value.enabled
  }

  name                = each.key
  location            = var.location
  resource_group_name = var.resource_group_name
  gateway_address     = each.value.lng_gateway_address
  address_space       = each.value.lng_address_space
}

resource "azurerm_virtual_network_gateway_connection" "vng_connection" {
  for_each = local.local_network_gateways_map

  name                = each.key
  location            = var.location
  resource_group_name = var.resource_group_name

  type  = each.value.connection_type

  virtual_network_gateway_id = azurerm_virtual_network_gateway.vpn[0].id
  local_network_gateway_id   = azurerm_local_network_gateway.lng_prod[each.key].id --<<<< there's the problem

  shared_key                         = each.value.connections[0].vpn_shared_key
  connection_protocol                = "IKEv2"
  dpd_timeout_seconds                = each.value.connections[0].dpd_timeout_seconds
  enable_bgp                         = each.value.connections[0].vngc_enable_bgp
  express_route_gateway_bypass       = each.value.connections[0].vngc_express_route_gateway_bypass
  local_azure_ip_address_enabled     = each.value.connections[0].vngc_local_azure_ip_address_enabled
  use_policy_based_traffic_selectors = each.value.connections[0].vngc_use_policy_based_traffic_selectors
  routing_weight                     = 0

  ipsec_policy {
    dh_group         = each.value.connections[0].dh_group
    ike_encryption   = each.value.connections[0].ike_encryption
    ike_integrity    = each.value.connections[0].ike_integrity
    ipsec_encryption = each.value.connections[0].ipsec_encryption
    ipsec_integrity  = each.value.connections[0].ipsec_integrity
    pfs_group        = each.value.connections[0].pfs_group
    sa_datasize      = each.value.connections[0].sa_datasize
    sa_lifetime      = each.value.connections[0].sa_lifetime
  }

  tags = {
    software        = each.value.connections[0].software
    environment     = each.value.connections[0].environment
    customer        = each.value.connections[0].customer
    special_purpose = each.value.connections[0].special_purpose
  }
}




What I got so far is this:

到目前为止，我得到的是：




+  all_connections = flatten([
    for k, v in local.local_network_gateways : {
      for conn_k, conn_v in v.connections : "${k}_${conn_v.name}" => conn_v
    }
  ])
}

output "testme" {
  value = local.all_connections
}




and the output is:

输出结果为：




testme = [
  {
    "vpn1_connection1" = {
      "connection_type" = "VNet2VNet"
      "enabled" = true
      "name" = "vpn1-connection1"
      "vpn_shared_key" = "somegibetrrish"
    }
    "vpn1_connection2" = {
      "connection_type" = "IPsec"
      "enabled" = true
      "name" = "vpn1-connection2"
      "vpn_shared_key" = "somegiberrish"
    }
  },
  {
    "vpn2_connection1" = {
      "connection_type" = "dasdwawdw"
      "enabled" = true
      "name" = "vpn2-connection1"
      "vpn_shared_key" = "vpn2_somegibetrrish"
    }
  },
]




But I cannot understand how to make the connection between the connection and its local_network_gateway, aka:

但我无法理解如何在连接及其本地网络网关之间建立连接，也就是：




  local_network_gateway_id   = azurerm_local_network_gateway.lng_prod[each.key].id




and how to define the rest of the azurerm_virtual_network_gateway_connection attributes based of the loop's result.
Thank you!

以及如何基于循环的结果定义azurerm_虚拟_网络_网关_连接的其余属性。谢谢!


更多回答
优秀答案推荐

You have to use merge to flatten your local.all_connections:

您必须使用合并来拼合本地的.all_Connections：


locals {
  all_connections = merge(flatten([
    for k, v in local.local_network_gateways : {
      for conn_k, conn_v in v.connections : "${k}_${conn_v.name}" => conn_v
    }
  ])...) # the Dots are important - do NOT remove
}


So to answer my question, these are the locals:

因此，为了回答我的问题，以下是当地人：




locals {
  local_network_gateways_loop = flatten([
    for k, v in var.local_network_gateways : [
      for conn_k, conn_v in v.connections : {
        lng_name                                = k
        conn_name                               = conn_k
        connection_type                         = conn_v.connection_type
        vpn_shared_key                          = conn_v.vpn_shared_key
        dpd_timeout_seconds                     = conn_v.dpd_timeout_seconds
        vngc_enable_bgp                         = conn_v.vngc_enable_bgp
        vngc_express_route_gateway_bypass       = conn_v.vngc_express_route_gateway_bypass
        vngc_local_azure_ip_address_enabled     = conn_v.vngc_local_azure_ip_address_enabled
        vngc_use_policy_based_traffic_selectors = conn_v.vngc_use_policy_based_traffic_selectors
        dh_group                                = conn_v.dh_group
        ike_encryption                          = conn_v.ike_encryption
        ike_integrity                           = conn_v.ike_integrity
        ipsec_encryption                        = conn_v.ipsec_encryption
        ipsec_integrity                         = conn_v.ipsec_integrity
        pfs_group                               = conn_v.pfs_group
        sa_datasize                             = conn_v.sa_datasize
        sa_lifetime                             = conn_v.sa_lifetime
        software                                = conn_v.software
        environment                             = conn_v.environment
        customer                                = conn_v.customer
        special_purpose                         = conn_v.special_purpose
        enabled                                 = conn_v.enabled
      }
    ]
  ])
  
  all_connections_map = { for idx, conn in local.local_network_gateways_loop : idx => conn }
}




and this is how it's used:

这就是它的用法：




resource "azurerm_virtual_network_gateway_connection" "vng_connection" {
  for_each = local.all_connections_map

  name                = each.value.conn_name
  location            = var.location
  resource_group_name = var.resource_group_name

  type                = each.value.connection_type

  virtual_network_gateway_id = azurerm_virtual_network_gateway.vpn[0].id
  local_network_gateway_id   = azurerm_local_network_gateway.lng_prod[each.value.lng_name].id
  ...




更多回答

and that is because I was using a very old terraform version. If you felt like it was of any use, let me know where you're from. :)

这是因为我使用的是一个非常古老的地形版本。如果你觉得它有任何用处，让我知道你从哪里来。：)

24 4 0
文章推荐： VSCode Pytest discovery error but pytest --collect-only works(VSCode PYTEST发现错误，但PYTEST--仅收集有效)
文章推荐： Flutter InAppWebView throwing error Uncaught (in promise) NotAllowedError: Write permission denied. when tested on Android devices(Ffltter InAppWebView引发错误未捕获(在Promise中)NotAlledError：写入权限被拒绝。在Android设备上测试时)
文章推荐： How to add an empty, editable column to a Taipy's GUI table?(如何将可编辑的空列添加到Taipy的图形用户界面表中？)
文章推荐： How do I get images to upload to the server with TinyMCE?(如何使用TinyMCE获取要上传到服务器的图像？)
bug小助手
个人简介

我是一名优秀的程序员,十分优秀！

作者热门文章
滴滴打车优惠券免费领取
滴滴打车优惠券
全站热门文章
Copyright 2021 - 2024 cfsdn All Rights Reserved 蜀ICP备2022000587号
广告合作:1813099741@qq.com 6ren.com