azure - 如何使用另一个二头肌模块文件中的 keyvault

Question

我正在创建一个二头肌文件，用于部署 key 保管库和一些存储帐户。但这些资源位于不同的模块文件中。当我尝试将存储帐户连接字符串添加到 key 保管库时，我似乎可以引用 key 保管库。

ma​​in.bicep

module resourceKeyVaultModule './modules/keyvault.bicep' = {
  name: 'resourceKeyVaultModuleDeployment'
  params: {
    application: application
    location: location
    environment: environment
    severity: severity
  }
  scope: resourceGroup
}

module resourceStorageAccountModule './modules/storage.bicep' = {
  name: 'resourceStorageAccountModuleDeployment'
  params: {
    application: application
    location: location
    environment: environment
    severity: severity
    keyVault: resourceKeyVaultModule.outputs.name
  }
  scope: resourceGroup
}

keyvault.bicep

// == Key Vault
resource keyVault 'Microsoft.KeyVault/vaults@2022-07-01' = {
  name: nameKeyVault
  location: location
  tags: {
    location: location
    environment: environment
    severity: severity
  }
  properties: {
    accessPolicies: [
      {
        objectId: ''
        permissions: {
          certificates: [
            'all'
          ]
          keys: [
            'all'
          ]
          secrets: [
            'all'
          ]
          storage: [
            'all'
          ]
        }
        tenantId: ''
      }
    ]
    sku: {
      family: 'A'
      name: 'standard'
    }
    tenantId: ''
  }
}

output name string = keyVault.name

存储.bicep

param keyVault string

// == Storage Account
resource storageAccount 'Microsoft.Storage/storageAccounts@2022-05-01' = {
  name: nameStorageAccount
  location: location
  tags: {
    location: location
    environment: environment
    severity: severity
  }
  sku: {
    name: 'Standard_LRS'
  }
  kind: 'StorageV2'
  properties: {
    minimumTlsVersion: 'TLS1_2'
  }
}

resource secretConnectionString 'Microsoft.KeyVault/vaults/secrets@2022-07-01' = {
  name: 'connectionString-storageAccount'
  dependsOn: [keyVault]
  tags: {
    location: location
    environment: environment
    severity: severity
  }
  properties: {
    value: 'DefaultEndpointsProtocol=https;AccountName=${storageAccount.name};AccountKey=${listKeys(storageAccount.id, storageAccount.apiVersion).keys[0].value};EndpointSuffix=${az.environment().suffixes.storage}'
  }
}

取决于:[keyVault]错误:封闭数组需要“module[] | (resource | module) | resources[]”类型的项目，但提供的项目类型为“string”.bicep(BCP034)

Answer 1

我认为您正在寻找现有关键字。

To reference an existing resource that isn't deployed in your current Bicep file, declare the resource with the existing keyword. Use the existing keyword when you're deploying a resource that needs to get a value from an existing resource. You access the existing resource's properties through its symbolic name.

The resource isn't redeployed when referenced with the existing keyword.

来源:Existing resources in Bicep