azure - 如何在 terraform azure for redis 中使用私有(private)端点实现？

Question

我需要地形方面的帮助。我需要使用专用端点部署 azure for redis 缓存。我的代码:

 resource "azurerm_redis_cache" "redis_cache_example" {
  name                          = "redis-cache-ex"
  location                      = var.location
  resource_group_name           = var.resource_group_name
  capacity                      = var.redis_plan_capacity
  family                        = var.redis_plan_family
  sku_name                      = var.redis_plan_sku_name
  enable_non_ssl_port           = false
  minimum_tls_version           = "1.2"
  public_network_access_enabled = false
}

resource "azurerm_private_dns_zone" "private_dns_zone_example" {
  name                = "example.redis-ex.azure.com"
  resource_group_name = var.resource_group_name
}

resource "azurerm_private_dns_zone_virtual_network_link" "virtual_network_link_example" {
  name                  = "exampleVnet.com"
  private_dns_zone_name = azurerm_private_dns_zone.private_dns_zone_example.name
  virtual_network_id    = var.vnet_id
  resource_group_name   = var.resource_group_name
}

resource "azurerm_private_endpoint" "redis_pe_example" {
  name                = "redis-private-endpoint-ex"
  location            = var.location
  resource_group_name = var.resource_group_name
  subnet_id           = var.subnet_id

   private_dns_zone_group {
    name                 = "privatednsrediszonegroup"
    private_dns_zone_ids = [azurerm_private_dns_zone.private_dns_zone_example.id]
  }

  private_service_connection {
    name                           = "peconnection-example"
    private_connection_resource_id = azurerm_redis_cache.redis_cache_example.id
    is_manual_connection           = false
    subresource_names              = ["redisCache"]
  }
}

部署后，我的 Redis 无法在 vnet 内 ping 通。我的地形出了什么问题？

Answer 1

您还可以添加 azurerm_private_endpoint 资源并将其链接到 azurerm_redis_cache(或者我猜还有其他资源)。

resource "azurerm_redis_cache" "default" {
...
}

resource "azurerm_private_endpoint" "default" {
  count               = 1
  name                = format("%s-redis%d", var.env, count.index + 1)
  resource_group_name = data.azurerm_resource_group.default.name
  location            = data.azurerm_resource_group.default.location
  subnet_id           = data.azurerm_subnet.default.id

  private_service_connection {
    name                           = format("%s-redis%d-pe", var.env, count.index + 1)
    private_connection_resource_id = azurerm_redis_cache.default[count.index].id
    is_manual_connection           = false
    subresource_names              = ["redisCache"]
  }
}

您可以在 AZ docs 上找到其他私有(private)资源列表.