azure - 使用 ARM 订阅级部署部署多个资源时出现问题-6ren

azure - 使用 ARM 订阅级部署部署多个资源时出现问题

转载作者：行者123 更新时间：2023-12-02 07:04:04

我正在重写 ARM 模板，因为我们不再使用链接模板。链接模板给我们带来了版本控制的麻烦。我正在使用订阅级别部署来部署资源组，其中包含嵌套的删除锁、存储帐户、keyvault、2 个函数应用、用户分配的托管标识和 keyvault 访问策略。

我使用的ARM模板:

{
    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "deplocation": {
            "type": "string",
            "allowedValues": [
                "West Europe",
                "North Europe"
            ],
            "defaultValue": "West Europe",
            "metadata": {
                "description": "Location for all resources."
            }
        },
        "tags": {
            "type": "object"
        },
        "rgName": {
            "type": "string"
        },
        "saName": {
            "type": "string",
            "metadata": {
                "description": "The name of the resource."
            }
        },
        "saType": {
            "type": "string",
            "allowedValues": [
                "Standard_LRS",
                "Standard_GRS",
                "Standard_ZRS",
                "Premium_LRS"
            ],
            "defaultValue": "Standard_LRS",
            "metadata": {
                "description": "Gets or sets the SKU name. Required for account creation; optional for update. Note that in older versions, SKU name was called accountType. - Standard_LRS, Standard_GRS, Standard_RAGRS, Standard_ZRS, Premium_LRS, Premium_ZRS, Standard_GZRS, Standard_RAGZRS"
            }
        },
        "saKind": {
            "type": "string",
            "allowedValues": [
                "StorageV2",
                "BlobStorage",
                "FileStorage",
                "BlockBlobStorage"
            ],
            "defaultValue": "StorageV2",
            "metadata": {
                "description": "Indicates the type of storage account. - Storage, StorageV2, BlobStorage, FileStorage, BlockBlobStorage"
            }
        },
        "saAccessTier": {
            "type": "string"
        },
        "saSupportsHttpsTrafficOnly": {
            "type": "bool"
        },
        "kvName": {
            "type": "string"
        },
        "kvSkuName": {
            "type": "string"
        },
        "kvSkuFamily": {
            "type": "string"
        },
        "kvSecretsPermissions": {
            "type": "array"
        },
        "uamiName": {
            "type": "string"
        },
        "fa1Name": {
            "type": "string"
        },
        "fa2Name": {
            "type": "string"
        },
        "aspName": {
            "type": "string"
        },
        "aspRg": {
            "type": "string"
        },
        "appInsightsName": {
            "type": "string"
        },
        "appInsightsRg": {
            "type": "string"
        }
    },
    "variables": {
        "tenantId": "[subscription().tenantId]",
        "subscriptionId": "[subscription().subscriptionId]"
    },
    "resources": [
        {
            "type": "Microsoft.Resources/resourceGroups",
            "apiVersion": "2018-05-01",
            "location": "[parameters('depLocation')]",
            "name": "[parameters('rgName')]",
            "tags": "[parameters('tags')]",
            "properties": {
            }
        },
        {
            "type": "Microsoft.Resources/deployments",
            "apiVersion": "2018-05-01",
            "name": "resourceDeployment",
            "resourceGroup": "[parameters('rgName')]",
            "dependsOn": [
                "[resourceId('Microsoft.Resources/resourceGroups/', parameters('rgName'))]"
            ],
            "properties": {
                "mode": "Incremental",
                "template": {
                    "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
                    "contentVersion": "1.0.0.0",
                    "resources": [
                        {
                            "name": "DeletionLock",
                            "type": "Microsoft.Authorization/locks",
                            "apiVersion": "2017-04-01",
                            "properties": {
                                "level": "CanNotDelete",
                                "notes": "[parameters('rgName')]"
                            }
                        },
                        {
                            "name": "[parameters('saName')]",
                            "type": "Microsoft.Storage/storageAccounts",
                            "apiVersion": "2019-04-01",
                            "sku": {
                                "name": "[parameters('saType')]"
                            },
                            "kind": "[parameters('saKind')]",
                            "location": "[parameters('deplocation')]",
                            "tags": "[parameters('tags')]",
                            "properties": {
                                "accessTier": "[parameters('saAccessTier')]",
                                "supportsHttpsTrafficOnly": "[parameters('saSupportsHttpsTrafficOnly')]"
                            }
                        },
                        {
                            "name": "[concat(parameters('saName'), '/default')]",
                            "type": "Microsoft.Storage/storageAccounts/blobServices",
                            "apiVersion": "2019-04-01",
                            "dependsOn": [
                                "[resourceId('Microsoft.Storage/storageAccounts', parameters('saName'))]"
                            ],
                            "properties": {
                                "cors": {
                                    "corsRules": [
                                    ]
                                },
                                "deleteRetentionPolicy": {
                                    "enabled": false
                                }
                            }
                        },
                        {
                            "name": "[parameters('kvName')]",
                            "type": "Microsoft.KeyVault/vaults",
                            "apiVersion": "2018-02-14",
                            "location": "[parameters('deplocation')]",
                            "tags": "[parameters('tags')]",
                            "properties": {
                                "tenantId": "[variables('tenantId')]",
                                "accessPolicies": [
                                ],
                                "sku": {
                                    "name": "[parameters('kvSkuName')]",
                                    "family": "[parameters('kvSkuFamily')]"
                                }
                            }
                        },
                        {
                            "name": "[parameters('uamiName')]",
                            "type": "Microsoft.ManagedIdentity/userAssignedIdentities",
                            "apiVersion": "2018-11-30",
                            "location": "[parameters('deplocation')]",
                            "tags": "[parameters('tags')]",
                            "properties": {
                            }
                        },
                        {
                            "name": "[parameters('fa1Name')]",
                            "type": "Microsoft.Web/sites",
                            "apiVersion": "2019-08-01",
                            "kind": "functionapp",
                            "location": "[parameters('deplocation')]",
                            "tags": "[parameters('tags')]",
                            "dependsOn": [
                                "[resourceId('Microsoft.ManagedIdentity/userAssignedIdentities/', parameters('uamiName'))]",
                                "[resourceId('Microsoft.Storage/storageAccounts/', parameters('saName'))]"
                            ],
                            "identity": {
                                "type": "SystemAssigned, UserAssigned",
                                "userAssignedIdentities": {
                                    "[concat('/subscriptions/', variables('subscriptionId'), '/resourceGroups/', parameters('rgName'), '/providers/Microsoft.ManagedIdentity/userAssignedIdentities/', parameters('uamiName'))]": {
                                    }
                                }
                            },
                            "properties": {
                                "siteConfig": {
                                    "appSettings": [
                                        {
                                            "name": "FUNCTIONS_WORKER_RUNTIME",
                                            "value": "dotnet"
                                        },
                                        {
                                            "name": "WEBSITE_TIME_ZONE",
                                            "value": "W. Europe Standard Time"
                                        },
                                        {
                                            "name": "AzureWebJobsStorage",
                                            "value": "[concat('DefaultEndpointsProtocol=https;AccountName=',parameters('saName'),';AccountKey=',listKeys(concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.Storage/storageAccounts/',parameters('saName')),providers('Microsoft.Storage', 'storageAccounts').apiVersions[0]).keys[0].value,';')]"
                                        },
                                        {
                                            "name": "FUNCTIONS_EXTENSION_VERSION",
                                            "value": "~2"
                                        },
                                        {
                                            "name": "WEBSITE_RUN_FROM_PACKAGE",
                                            "value": "1"
                                        },
                                        {
                                            "name": "APPINSIGHTS_INSTRUMENTATIONKEY",
                                            "value": "[reference(concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('appInsightsRg'),'/providers/microsoft.insights/components/',parameters('appInsightsName')),providers('microsoft.insights', 'components').apiVersions[0]).InstrumentationKey]"
                                        }
                                    ],
                                    "alwaysOn": true
                                },
                                "serverFarmId": "[concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('aspRg'),'/providers/Microsoft.Web/serverfarms/',parameters('aspName'))]",
                                "httpsOnly": true
                            }
                        },
                        {
                            "name": "[parameters('fa2Name')]",
                            "type": "Microsoft.Web/sites",
                            "apiVersion": "2019-08-01",
                            "kind": "functionapp",
                            "location": "[parameters('deplocation')]",
                            "tags": "[parameters('tags')]",
                            "dependsOn": [
                                "[resourceId('Microsoft.ManagedIdentity/userAssignedIdentities/',parameters('uamiName'))]",
                                "[resourceId('Microsoft.Storage/storageAccounts/', parameters('saName'))]"
                            ],
                            "identity": {
                                "type": "SystemAssigned, UserAssigned",
                                "userAssignedIdentities": {
                                    "[concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.ManagedIdentity/userAssignedIdentities/',parameters('uamiName'))]": {
                                    }
                                }
                            },
                            "properties": {
                                "siteConfig": {
                                    "appSettings": [
                                        {
                                            "name": "FUNCTIONS_WORKER_RUNTIME",
                                            "value": "dotnet"
                                        },
                                        {
                                            "name": "WEBSITE_TIME_ZONE",
                                            "value": "W. Europe Standard Time"
                                        },
                                        {
                                            "name": "AzureWebJobsStorage",
                                            "value": "[concat('DefaultEndpointsProtocol=https;AccountName=',parameters('saName'),';AccountKey=',listKeys(concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.Storage/storageAccounts/',parameters('saName')),providers('Microsoft.Storage', 'storageAccounts').apiVersions[0]).keys[0].value,';')]"
                                        },
                                        {
                                            "name": "FUNCTIONS_EXTENSION_VERSION",
                                            "value": "~2"
                                        },
                                        {
                                            "name": "WEBSITE_RUN_FROM_PACKAGE",
                                            "value": "1"
                                        },
                                        {
                                            "name": "APPINSIGHTS_INSTRUMENTATIONKEY",
                                            "value": "[reference(concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('appInsightsRg'),'/providers/microsoft.insights/components/',parameters('appInsightsName')),providers('microsoft.insights', 'components').apiVersions[0]).InstrumentationKey]"
                                        }
                                    ],
                                    "alwaysOn": true
                                },
                                "serverFarmId": "[concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('aspRg'),'/providers/Microsoft.Web/serverfarms/',parameters('aspName'))]",
                                "httpsOnly": true
                            }
                        },
                        {
                            "name": "[concat(parameters('kvName'), '/add')]",
                            "type": "Microsoft.KeyVault/vaults/accessPolicies",
                            "apiVersion": "2018-02-14",
                            "dependsOn": [
                                "[resourceId('Microsoft.KeyVault/vaults', parameters('kvName'))]",
                                "[resourceId('Microsoft.Web/sites', parameters('fa1Name'))]",
                                "[resourceId('Microsoft.Web/sites', parameters('fa2Name'))]"
                            ],
                            "properties": {
                                "accessPolicies": [
                                    {
                                        "tenantId": "[variables('tenantId')]",
                                        "objectId": "[reference(concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.Web/sites/', parameters('fa1Name'), '/providers/Microsoft.ManagedIdentity/Identities/default'),providers('Microsoft.ManagedIdentity', 'Identities').apiVersions[0]).principalId]",
                                        "permissions": {
                                            "secrets": "[parameters('kvSecretsPermissions')]"
                                        }
                                    }
                                    ,
                                    {
                                        "tenantId": "[variables('tenantId')]",
                                        "objectId": "[reference(concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.Web/sites/', parameters('fa2Name'), '/providers/Microsoft.ManagedIdentity/Identities/default'),providers('Microsoft.ManagedIdentity', 'Identities').apiVersions[0]).principalId]",
                                        "permissions": {
                                            "secrets": "[parameters('kvSecretsPermissions')]"
                                        }
                                    }
                                ]
                            }
                        }
                    ]
                }
            }
        }
    ],
    "outputs": {
        // "uamiPrincipalId": {            
        //     "value": "[reference(concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.ManagedIdentity/userAssignedIdentities/', parameters('uamiName')), providers('Microsoft.ManagedIdentity', 'userAssignedIdentities').apiVersions[0]).principalId]",
        //     "type": "string"
        // }
    }
}

用于部署模板的 Powershell 代码。

#region variableDeclaration
$ErrorActionPreference = "Stop"
$subscriptionId = "subscription id here"
$location = "West Europe"
#endregion variableDeclaration

Set-location -path $PSScriptRoot

#region connectToSubscription
Connect-AzAccount -ErrorAction Stop
Set-AzContext -Subscription $subscriptionId
#endregion connectToSubscription

#region createAzureResources
$workloadInputResources = @{
    depLocation                = $location
    tags                       = @{
        dienst         = "-"
        kostenplaats   = "-"
        omgeving       = "-"
        contactpersoon = "-"
        eigenaar       = "-"
        referentie     = "-"
        omschrijving   = "-"
    }    
    rgName                     = "resources-dev-rg"
    saName                     = "resourcesdevsa"
    saType                     = "Standard_LRS"
    saKind                     = "StorageV2"
    saAccessTier               = "Hot"
    saSupportsHttpsTrafficOnly = $true
    kvName                     = "resourcesdevkv"
    kvSkuName                  = "Standard"
    kvSkuFamily                = "A"
    kvSecretsPermissions       = @("get", "list" )
    uamiName                   = "resources-dev-uami"
    fa1Name                    = "resources-dev-fa1"
    fa2Name                    = "resources-dev-fa2"
    aspName                    = "resources-dev-asp"
    aspRg                      = "resources-asp-dev-rg"
    appInsightsName            = "resources-dev-appins"
    appInsightsRg              = "resources-appins-dev-rg"
}


New-AzDeployment -Name "deployResources" -Location $location -TemplateFile .\deploy.json  @workloadInputResources

#endregion createAzureResources

问题:

按原样部署arm模板时出现以下错误:

Resource Microsoft.Storage/storageAccounts 'resourcesdevsa' failed with message '{
  "error": {
    "code": "ResourceGroupNotFound",
    "message": "Resource group 'resources-dev-rg' could not be found."
  }
}'

但是资源组创建成功。

重新运行脚本时出现以下错误:

Resource Microsoft.Storage/storageAccounts 'resourcesdevsa' failed with message '{
  "error": {
    "code": "ResourceNotFound",
    "message": "The Resource 'Microsoft.Storage/storageAccounts/saName' under resource group 'resources-dev-rg' was not found."
  }
}'

当我注释掉部署 fa1、fa2 和访问策略时，第二个问题就消失了

我的印象是使用dependsOn可以解决依赖问题，但显然我要么错了，使用不正确，要么在某处缺少dependsOn。

我已经盯着这个问题几个小时了，但似乎找不到问题所在。如有任何帮助，我们将不胜感激。

最佳答案

小更新，因为部分内容已解决。但仍然存在一些问题。

我重写了ARM模板文件，如下所示

{
    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "deplocation": {
            "type": "string",
            "allowedValues": [
                "West Europe",
                "North Europe"
            ],
            "defaultValue": "West Europe",
            "metadata": {
                "description": "Location for all resources."
            }
        },
        "tags": {
            "type": "object"
        },
        "rgName": {
            "type": "string"
        },
        "saName": {
            "type": "string",
            "metadata": {
                "description": "The name of the resource."
            }
        },
        "saType": {
            "type": "string",
            "allowedValues": [
                "Standard_LRS",
                "Standard_GRS",
                "Standard_ZRS",
                "Premium_LRS"
            ],
            "defaultValue": "Standard_LRS",
            "metadata": {
                "description": "Gets or sets the SKU name. Required for account creation; optional for update. Note that in older versions, SKU name was called accountType. - Standard_LRS, Standard_GRS, Standard_RAGRS, Standard_ZRS, Premium_LRS, Premium_ZRS, Standard_GZRS, Standard_RAGZRS"
            }
        },
        "saKind": {
            "type": "string",
            "allowedValues": [
                "StorageV2",
                "BlobStorage",
                "FileStorage",
                "BlockBlobStorage"
            ],
            "defaultValue": "StorageV2",
            "metadata": {
                "description": "Indicates the type of storage account. - Storage, StorageV2, BlobStorage, FileStorage, BlockBlobStorage"
            }
        },
        "saAccessTier": {
            "type": "string"
        },
        "saSupportsHttpsTrafficOnly": {
            "type": "bool"
        },
        "kvName": {
            "type": "string"
        },
        "kvSkuName": {
            "type": "string"
        },
        "kvSkuFamily": {
            "type": "string"
        },
        "kvSecretsPermissions": {
            "type": "array"
        },
        "uamiName": {
            "type": "string"
        },
        "fa1Name": {
            "type": "string"
        },
        "fa2Name": {
            "type": "string"
        },
        "aspName": {
            "type": "string"
        },
        "aspRg": {
            "type": "string"
        },
        "appInsightsName": {
            "type": "string"
        },
        "appInsightsRg": {
            "type": "string"
        }
    },
    "variables": {
        "tenantId": "[subscription().tenantId]",
        "subscriptionId": "[subscription().subscriptionId]"
    },
    "resources": [
        {
            "type": "Microsoft.Resources/resourceGroups",
            "apiVersion": "2018-05-01",
            "location": "[parameters('depLocation')]",
            "name": "[parameters('rgName')]",
            "tags": "[parameters('tags')]",
            "properties": {
            }
        },
        {
            "type": "Microsoft.Resources/deployments",
            "apiVersion": "2018-05-01",
            "name": "resourceDeployment",
            "resourceGroup": "[parameters('rgName')]",
            "dependsOn": [
                "[resourceId('Microsoft.Resources/resourceGroups/', parameters('rgName'))]"
            ],
            "properties": {
                "mode": "Incremental",
                "template": {
                    "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
                    "contentVersion": "1.0.0.0",
                    "resources": [
                        {
                            "name": "DeletionLock",
                            "type": "Microsoft.Authorization/locks",
                            "apiVersion": "2017-04-01",
                            "properties": {
                                "level": "CanNotDelete",
                                "notes": "[parameters('rgName')]"
                            }
                        },
                        {
                            "name": "[parameters('saName')]",
                            "type": "Microsoft.Storage/storageAccounts",
                            "apiVersion": "2019-04-01",
                            "sku": {
                                "name": "[parameters('saType')]"
                            },
                            "kind": "[parameters('saKind')]",
                            "location": "[parameters('deplocation')]",
                            "tags": "[parameters('tags')]",
                            "properties": {
                                "accessTier": "[parameters('saAccessTier')]",
                                "supportsHttpsTrafficOnly": "[parameters('saSupportsHttpsTrafficOnly')]"
                            },
                            "resources": [

                            ]
                        },                       
                        {
                            "type": "Microsoft.Storage/storageAccounts/blobServices",
                            "apiVersion": "2019-04-01",
                            "name": "[concat(parameters('saName'), '/default')]",
                            "dependsOn": [                                
                                "[concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.Storage/storageAccounts/',parameters('saName'))]"
                            ],
                            "properties": {
                                "cors": {
                                    "corsRules": [
                                    ]
                                },
                                "deleteRetentionPolicy": {
                                    "enabled": false
                                }
                            }
                        },
                        {
                            "name": "[parameters('uamiName')]",
                            "type": "Microsoft.ManagedIdentity/userAssignedIdentities",
                            "apiVersion": "2018-11-30",
                            "location": "[parameters('deplocation')]",
                            "tags": "[parameters('tags')]",
                            "properties": {
                            }
                        },
                        {
                            "name": "[parameters('fa1Name')]",
                            "type": "Microsoft.Web/sites",
                            "apiVersion": "2019-08-01",
                            "kind": "functionapp",
                            "location": "[parameters('deplocation')]",
                            "tags": "[parameters('tags')]",
                            "dependsOn": [
                                "[concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.ManagedIdentity/userAssignedIdentities/',parameters('uamiName'))]",
                                "[concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.Storage/storageAccounts/',parameters('saName'))]"
                            ],
                            "identity": {
                                "type": "SystemAssigned, UserAssigned",
                                "userAssignedIdentities": {
                                    "[concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.ManagedIdentity/userAssignedIdentities/',parameters('uamiName'))]": {
                                    }
                                }
                            },
                            "properties": {
                                "siteConfig": {
                                    "appSettings": [
                                        {
                                            "name": "FUNCTIONS_WORKER_RUNTIME",
                                            "value": "dotnet"
                                        },
                                        {
                                            "name": "WEBSITE_TIME_ZONE",
                                            "value": "W. Europe Standard Time"
                                        },
                                        // {
                                        //     "name": "AzureWebJobsStorage",
                                        //     "value": "[concat('DefaultEndpointsProtocol=https;AccountName=',parameters('saName'),';AccountKey=',listKeys(concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.Storage/storageAccounts/',parameters('saName')),providers('Microsoft.Storage', 'storageAccounts').apiVersions[0]).keys[0].value,';')]"
                                        // },
                                        {
                                            "name": "FUNCTIONS_EXTENSION_VERSION",
                                            "value": "~2"
                                        },
                                        {
                                            "name": "WEBSITE_RUN_FROM_PACKAGE",
                                            "value": "0"
                                        },
                                        {
                                            "name": "APPINSIGHTS_INSTRUMENTATIONKEY",
                                            "value": "[reference(concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('appInsightsRg'),'/providers/microsoft.insights/components/',parameters('appInsightsName')),providers('microsoft.insights', 'components').apiVersions[0]).InstrumentationKey]"
                                        }
                                    ],
                                    "alwaysOn": true
                                },
                                "serverFarmId": "[concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('aspRg'),'/providers/Microsoft.Web/serverfarms/',parameters('aspName'))]",
                                "httpsOnly": true
                            }
                        },
                        {
                            "name": "[parameters('fa2Name')]",
                            "type": "Microsoft.Web/sites",
                            "apiVersion": "2019-08-01",
                            "kind": "functionapp",
                            "location": "[parameters('deplocation')]",
                            "tags": "[parameters('tags')]",
                            "dependsOn": [
                                "[concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.ManagedIdentity/userAssignedIdentities/',parameters('uamiName'))]",
                                "[concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.Storage/storageAccounts/',parameters('saName'))]"
                            ],
                            "identity": {
                                "type": "SystemAssigned, UserAssigned",
                                "userAssignedIdentities": {
                                    "[concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.ManagedIdentity/userAssignedIdentities/',parameters('uamiName'))]": {
                                    }
                                }
                            },
                            "properties": {
                                "siteConfig": {
                                    "appSettings": [
                                        {
                                            "name": "FUNCTIONS_WORKER_RUNTIME",
                                            "value": "dotnet"
                                        },
                                        {
                                            "name": "WEBSITE_TIME_ZONE",
                                            "value": "W. Europe Standard Time"
                                        },
                                        // {
                                        //     "name": "AzureWebJobsStorage",
                                        //     "value": "[concat('DefaultEndpointsProtocol=https;AccountName=',parameters('saName'),';AccountKey=',listKeys(concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.Storage/storageAccounts/',parameters('saName')),providers('Microsoft.Storage', 'storageAccounts').apiVersions[0]).keys[0].value,';')]"
                                        // },
                                        {
                                            "name": "FUNCTIONS_EXTENSION_VERSION",
                                            "value": "~2"
                                        },
                                        {
                                            "name": "WEBSITE_RUN_FROM_PACKAGE",
                                            "value": "0"
                                        },
                                        {
                                            "name": "APPINSIGHTS_INSTRUMENTATIONKEY",
                                            "value": "[reference(concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('appInsightsRg'),'/providers/microsoft.insights/components/',parameters('appInsightsName')),providers('microsoft.insights', 'components').apiVersions[0]).InstrumentationKey]"
                                        }
                                    ],
                                    "alwaysOn": true
                                },
                                "serverFarmId": "[concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('aspRg'),'/providers/Microsoft.Web/serverfarms/',parameters('aspName'))]",
                                "httpsOnly": true
                            }
                        },
                        {
                            "name": "[parameters('kvName')]",
                            "type": "Microsoft.KeyVault/vaults",
                            "apiVersion": "2018-02-14",
                            "location": "[parameters('deplocation')]",
                            "tags": "[parameters('tags')]",
                            "dependsOn": [
                                "[concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.Web/sites/',parameters('fa1Name'))]",
                                "[concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.Web/sites/',parameters('fa2Name'))]"                                
                            ],
                            "properties": {
                                "tenantId": "[variables('tenantId')]",
                                "accessPolicies": [
                                    // {
                                    //     "tenantId": "[variables('tenantId')]",
                                    //     "objectId": "[reference(concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.Web/sites/', parameters('fa1Name'), '/providers/Microsoft.ManagedIdentity/Identities/default'),providers('Microsoft.ManagedIdentity', 'Identities').apiVersions[0]).principalId]",
                                    //     "permissions": {
                                    //         "secrets": "[parameters('kvSecretsPermissions')]"
                                    //     }
                                    // },
                                    // {
                                    //     "tenantId": "[variables('tenantId')]",
                                    //     "objectId": "[reference(concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.Web/sites/', parameters('fa2Name'), '/providers/Microsoft.ManagedIdentity/Identities/default'),providers('Microsoft.ManagedIdentity', 'Identities').apiVersions[0]).principalId]",
                                    //     "permissions": {
                                    //         "secrets": "[parameters('kvSecretsPermissions')]"
                                    //     }
                                    // }
                                ],
                                "sku": {
                                    "name": "[parameters('kvSkuName')]",
                                    "family": "[parameters('kvSkuFamily')]"
                                }

                            }
                        }
                    ]
                }
            }
        }
    ],
    "outputs": {
        // "uamiPrincipalId": {            
        //     "value": "[reference(concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.ManagedIdentity/userAssignedIdentities/', parameters('uamiName')), providers('Microsoft.ManagedIdentity', 'userAssignedIdentities').apiVersions[0]).principalId]",
        //     "type": "string"
        // }
    }
}

这项工作非常完美，但正如你所看到的，我注释掉了 3 个部分。这是现在的问题区域。它们都是dependsOn问题。当我取消注释函数应用部署中的 AzureWebJobsStorage 部分时，部署失败并显示以下消息:

12:00:18 - Resource Microsoft.Storage/storageAccounts 'resourcesdevsa' failed with message '{
  "error": {
    "code": "ResourceGroupNotFound",
    "message": "Resource group 'resources-dev-rg' could not be found."
  }
}'

我已将 StorageAccount 添加到 dependentOn 部分

"dependsOn": [
  "[concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.ManagedIdentity/userAssignedIdentities/',parameters('uamiName'))]",
  "[concat('/subscriptions/',variables('subscriptionId'),'/resourceGroups/',parameters('rgName'),'/providers/Microsoft.Storage/storageAccounts/',parameters('saName'))]"
],

但这似乎并不能解决问题。

有什么想法吗？

更新2019年11月28日

好的。我有点沮丧。我现在拥有功能齐全的资源组级别部署。我正在 powershell 中创建资源组和资源组删除锁，然后创建 New-AzResourceGroupDeployment。当我尝试将其重写为订阅级别部署时，我不断遇到依赖性问题。例如;创建 KeyVault 访问策略会导致找不到函数应用的错误。为函数应用设置 AzureWebJobsStorage 设置时也会出现类似的错误。但当然不是对存储帐户的引用。

关于azure - 使用 ARM 订阅级部署部署多个资源时出现问题，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/58997832/

文章推荐：使用 Cloud Event Schema v1.0 进行 Azure 事件网格高级过滤

文章推荐： Azure 自动化 - 使用 AD 用户登录会引发错误

文章推荐： Azure 数据工厂 - 复制事件 - 自动创建表不起作用

powershell - Azure 自动化、Azure Runbooks、Azure CLI、Azure DSC、Azure ARM、Azure API
似乎有很多方法可以在 Azure 中自动使用 PowerShell。由于 ARM 模板是最新的，Azure 中的其他 PowerShell 选项是否已过时？这些工具/脚本之间有什么区别: Azure
azure - 为什么无法通过新的 Azure 门户配置 Azure 诊断以使用 Azure 表存储？
我正在开发一个将托管在 Azure 中的 Web API。我想使用 Azure 诊断将错误记录到 Azure 表存储中。在经典门户中，我可以将日志配置为转到 Azure 表存储。 Classic Po
azure - Azure 文件存储事件是否可以触发 Azure WebJob 或 Azure Function？
Azure 文件存储事件可以触发 Azure WebJob 或 Azure Function 吗？例如，在文件夹“/todo/”中创建文件时。最佳答案我们目前没有任何 Azure 文件绑定(bi
azure - 使用 azure 逻辑应用将数据从 azure 数据湖迁移到 azure sql
我需要创建一个逻辑应用程序，我的要求是，我需要从 azure data Lake Gen2 文件夹迁移 json 文件，并根据某些值需要将该 json 转换为 xml，然后将其发送到 SQL。因此，
azure - 有没有办法重用相同的 Azure 存储计划和 Azure 应用服务计划来托管多个 Azure Functions？
我使用 VS Code 创建了 1 个 node.js 和 1 个 java Azure Function 当我使用 VS Code 将这两个函数部署到 Azure 时，我最终获得了这么多 Azure
azure - Azure 诊断是否在 Azure 暂存槽中运行？
收集 Azure 诊断数据时，暂存槽是否也会将诊断数据发送到 WadPerformanceCounters 表？如果是这样，我该如何关闭它？或者在阅读诊断信息时如何区分暂存/生产。我不想显示有关我
azure - Azure 平台上使用哪个版本的 Azure SDK？
您好，我是 Azure 的新手。我有 VS 2012 和 Azure SDK 2.1，当我使用模拟器运行我的 Web 应用程序时一切正常。但是当我在 azure 上部署时出现错误消息: Could n
azure - Azure 租户和 Azure 订阅之间有什么区别？
我很难区分 Azure 订阅和 Azure 租户有何不同？我尝试使用示例来弄清楚，但每次我得出的结论是它们在某种程度上是相同的？如果租户是组织在注册 Microsoft 云服务时接收并拥有的 Azur
azure - Azure 指标资源管理器和 Azure 仪表板之间有什么区别？
如果我想在 Azure Insights 中设置自定义指标集合，并以(近)实时的方式可视化其中一些指标，并查看聚合的历史数据，我应该使用 Azure Metrics Explorer 还是 Azure
azure - Azure 数据工厂中的 Azure 集成运行时和自托管集成运行时之间的区别？
我想了解具有以下配置的 Azure 数据工厂 (ADF) 的现实示例/用例: Azure 集成运行时 (AIR) 默认值自托管集成运行时(SHIR) 其他问题: 这两种配置(AIR 和 SHIR)是
azure - Azure 总线指标中的背景噪音 Azure AMQP
请参阅下面来自 Azure 服务总线的指标。想要识别请求数量中的背景噪音|流量较低时的响应。假设振荡请求| session 中 amqp 握手的响应是潜在的。只是不明白这是什么类型的握手？从总线接收的
azure - Azure 事件中心如何使用 Azure 服务总线
此问题与 Azure 事件中心和 Azure 服务总线之间的区别无关。问题如下: 如果您将Azure Events Hub添加到您的应用程序中，那么您会注意到它依赖于Azure Service Bu
azure - Azure 辅助角色与 Azure 自动化之间的区别？
这两个事情是完全不同的，还是它们能完成的事情大致相同/相似？最佳答案 Azure 辅助角色是“应用程序场”中您自己的一组虚拟机。您可以以分布式方式在它们上运行任何代码。通常，您编写业务代码以在这些服
azure - Azure 存储和 Azure 虚拟机之间的连接
我目前正在使用 Windows Azure 虚拟机来运行 RStudio，我的虚拟机是 Windows Server R2 2012，它是 Azure 上的一项附加服务。我还有一个 Azure 存
azure - Azure 网站和 Azure 云服务有什么区别
我们正在寻找托管一个网站(一些 css、js、一个 html 文件，但不是 aspx、一个通用处理程序)。我们部署为: 1) Azure 网站 2) Azure 云服务两种解决方案都有效。但有一个
azure - Azure 存储数据移动库是否支持 Azure 表？
我想从 Azure 表创建 blob。 AzCopy 支持此功能，但我找不到任何说明数据移动 API 也支持它的文档。此选项可用吗？ https://azure.microsoft.com/en-us
azure - Azure 订阅所有者是否有权访问其中的 Azure 数据库？
This article表示 Azure 订阅所有者有权访问订阅中的所有资源。但是，要访问 Azure 数据库，必须是数据库中的用户，或者是 Azure Admin AD 组的成员。无论 SQL 安
azure - Azure 存储帐户连接字符串在 Azure 门户中的位置在哪里？
我尝试使用以下代码将 XML 文件上传到 Azure FTP 服务器: https://www.c-sharpcorner.com/article/upload-and-download-files-
azure - Azure 事件中心和 Azure 服务总线之间的根本区别？
除了 Azure 服务总线使用主题而 Azure 事件中心基于事件 - Azure 事件中心和 Azure 服务总线之间是否有任何根本区别？对我来说，事件和消息之间没有真正的区别，因为两者只是不同类
azure - Azure 点到站点客户端能否看到默认的 Azure DNS？
我有一个通过虚拟网络网关连接到 Azure 虚拟网络的 Windows VPN 客户端。目标#1 是使用其内部 IP 地址连接到我的虚拟机。这有效。第二个目标是使用其内部计算机名称进行连接(因为 I

行者123

个人简介

我是一名优秀的程序员,十分优秀！

作者热门文章

滴滴打车优惠券免费领取

全站热门文章

首页

博学

6Ren·AI

商城

azure - 使用 ARM 订阅级部署部署多个资源时出现问题