azure - Terraform Azure Key Vault - 超出了上下文截止日期

Question

我尝试使用 terraform 在 azure 中配置一个简单的 keyvault，但出现以下错误:

Error: retrieving contact for KeyVault: keyvault.BaseClient#GetCertificateContacts: Failure sending request: StatusCode=0 -- Original Error: context deadline exceeded

这是我的地形片段:

# data "azurerm_client_config" "current" {}
data "azuread_client_config" "current" {}

resource "azurerm_key_vault" "aks_key_vault" {
  name                        = var.aks_kv_name
  location                    = var.location
  resource_group_name         = var.rg_name
  enabled_for_disk_encryption = true
  tenant_id                   = data.azuread_client_config.current.tenant_id
#   soft_delete_retention_days  = var.aks_kv_soft_delete_retention_days
#   purge_protection_enabled    = false

  sku_name = var.aks_kv_sku

  access_policy {
    tenant_id = data.azuread_client_config.current.tenant_id
    object_id = data.azuread_client_config.current.object_id

    key_permissions     = var.aks_kv_key_permissions
    secret_permissions  = var.aks_kv_secret_permissions
    storage_permissions = var.aks_kv_storage_permissions
  }
  tags = merge(var.common_tags)
}

这是variables.tf

# Key Vault related variables
aks_kv_name                       = "jana-azure-csi-kv"
aks_kv_soft_delete_retention_days = 7
aks_kv_sku                        = "standard"
aks_kv_key_permissions            = ["Get"]
aks_kv_secret_permissions         = ["Get"]
aks_kv_storage_permissions        = ["Get"]

有人可以帮助我了解问题所在以及如何解决吗？

terraform 版本:

Terraform v1.3.6
on darwin_amd64

azurerm 版本:

version = "=3.0.0"

Answer 1

“超出上下文截止日期”表示所尊重的操作将无法在时间范围内完成。 主要是由于网络连接问题引起的。

这里的问题是由于 terraform 版本引起的，作为解决方案的一部分，请升级或保留 > 在提供商上从:版本 = "3.0.0"到版本 = ">=3.0.0"

之后请运行以下命令

terraform init -upgrade

通过以下代码复制相同的问题。这是用于创建 keyvault 的代码片段

主要tf文件如下:

data "azurerm_resource_group" "example" {
  name     = "**********"
}

provider "azurerm" {
  features {
    key_vault {
      purge_soft_delete_on_destroy    = true
      recover_soft_deleted_key_vaults = true
    }
  }
}

data "azurerm_client_config" "current" {}

resource "azurerm_key_vault" "example" {
  name                        = "swarnademokeyvault"
  location            = data.azurerm_resource_group.example.location
  resource_group_name = data.azurerm_resource_group.example.name
  enabled_for_disk_encryption = true
  tenant_id                   = data.azurerm_client_config.current.tenant_id
  soft_delete_retention_days  = 7
  purge_protection_enabled    = false

  sku_name = "standard"

  access_policy {
    tenant_id = data.azurerm_client_config.current.tenant_id
    object_id = data.azurerm_client_config.current.object_id

    key_permissions = [
      "Get",
    ]

    secret_permissions = [
      "Get",
    ]

    storage_permissions = [
      "Get",
    ]
  }
}

提供tf文件如下:

地形{

  required_version = "~>1.3.3"
  required_providers {
    azurerm = {
       source = "hashicorp/azurerm"
       version = ">=3.0.0"
         }
       }

}

当我们运行以下命令时

terraform plan 

运行时应用

terraform apply -auto-approve

验证: