Azure Frontdoor 动态 block 在 Terraform 中不起作用

Question

我在 Terraform 中为前门编码动态 block 时遇到一些问题。我在这里找到了一个很好的工作示例:https://github.com/spy86/terraform-azure-front-door/blob/main/front_door.tf

然而，我的前门设置并不像这个人那么复杂，我不需要他在他身上所做的一切。

我想要实现的目标是在我的前门上放置两个 backend_pool 以启用多个区域。做到这一点的唯一方法是引入动态 block 。然而，当我这样做时，我收到一个错误: │ 错误:不支持的属性 │ │ 在 frontdoor.tf 第 96 行，资源“azurerm_frontdoor”“jctestingfrontdoor”中: │ 96: for_each = var.backend_pool_settings.value.backend[ *] │ ├────────────── │ │ var.backend_pool_settings 是一个对象列表，只有在应用后才知道 │ │ 无法访问对象列表上的属性。您的意思是访问列表中特定元素的属性，还是列表中所有元素的属性？

这是我的前门代码:

Main.tf

resource "azurerm_frontdoor" "jctestingfrontdoor" {
  depends_on = [
    azurerm_key_vault.jctestingenv_keyvault,
  ]
  name                = "testingfrontdoor"
  resource_group_name = azurerm_resource_group.Terraform.name
  routing_rule {
    name               = "projroutingrule"
    accepted_protocols = ["Http", "Https"]
    patterns_to_match  = ["/*"]
    frontend_endpoints = ["projfrontendendpoint", "${local.frontendendpoint2}"]
    forwarding_configuration {
      forwarding_protocol = "MatchRequest"
      backend_pool_name   = "projbackendpool"
    }
  }

  backend_pool_load_balancing {
    name                        = "projloadbalancesettings"
    sample_size                 = 255
    successful_samples_required = 1
  }

  backend_pool_health_probe {
    name                = "projhealthprobesettings"
    path                = "/health/probe"
    protocol            = "Https"
    interval_in_seconds = 240
  }

  dynamic "backend_pool" {
    for_each = var.backend_pool_settings[*]
    content {
      name                = var.backend_pool_settings.name
      load_balancing_name = var.backend_pool_settings.load_balancing_name
      health_probe_name   = var.backend_pool_settings.health_probe_name

      dynamic "backend" {
        for_each = var.backend_pool_settings.backend
        content {
          address     = var.backend_pool_settings.address
          host_header = var.backend_pool_settings.host_header
          http_port   = var.backend_pool_settings.http_port
          https_port  = var.backend_pool_settings.https_port
          priority    = var.backend_pool_settings.priority
          weight      = var.backend_pool_settings.weight
          enabled     = var.backend_pool_settings.enabled
        }
      }
    }
  }

  frontend_endpoint {
    name      = "projfrontendendpoint"
    host_name = format("testingfrontdoor.azurefd.net")
  }

  frontend_endpoint {
    name      = local.frontendendpoint2
    host_name = format("portal-staging.terraform.example")
  }

}




resource "azurerm_frontdoor_custom_https_configuration" "portal_staging_https_config" {
  depends_on = [
    azurerm_frontdoor.jctestingfrontdoor
  ]
  frontend_endpoint_id              = "${azurerm_frontdoor.jctestingfrontdoor.id}/frontendEndpoints/${local.frontendendpoint2}"
  custom_https_provisioning_enabled = true

  custom_https_configuration {
    certificate_source                      = "AzureKeyVault"
    azure_key_vault_certificate_secret_name = "imported-cert"
    azure_key_vault_certificate_vault_id    = azurerm_key_vault.jctestingenv_keyvault.id
  }
}

变量.tf

variable "backend_pool_settings" {
  description = "backend pool stettings for frontdoor"
  type = object({
    name = string
    backend = list(object({
      address     = string
      host_header = string
      http_port   = number
      https_port  = number
      weight      = number
      priority    = number
      enabled     = bool
    }))
    load_balancing_name = string
    health_probe_name   = string
  })
}

本地人.tf

locals {
  frontendendpoint2 = "projfrondoordnsname"
  backendpool1      = "uksouth"
  backendpool2      = "westeurope"
}

输入变量.tfvars

backend_pool_settings = (
{
  name = "uksouth"
  backend = {
    address     = "portal-staging-testing1.terraform.example"
    host_header = "portal-staging-testing1.terraform.example"
    http_port   = 80
    https_port  = 443
    priority    = 1
    weight      = 50
    enabled     = true
  }
  load_balancing_name = "projloadbalancesettings"
  health_probe_name   = "projloadbalancesettings"
  },
  {
  name = "westeurope"
  backend = {
    address     = "portal-staging-testing2.terraform.example"
    host_header = "portal-staging-testing2.terraform.example"
    http_port   = 80
    https_port  = 443
    priority    = 1
    weight      = 50
    enabled     = true
  }
  load_balancing_name = "projloadbalancesettings"
  health_probe_name   = "projloadbalancesettings"
})

我已将变量编码为对象列表，但我不确定这是否正确，并且我不确定是否应该像示例中那样将 backend_pool 拆分为两个动态 block 。

更新:

完成我的代码后，我对其进行了进一步简化，

    resource "azurerm_frontdoor" "jctestingfrontdoor" {
      depends_on = [
        azurerm_key_vault.jctestingenv_keyvault,
      ]
      name                = "testingfrontdoor"
      resource_group_name = azurerm_resource_group.Terraform.name
      routing_rule {
        name               = "projroutingrule"
        accepted_protocols = ["Http", "Https"]
        patterns_to_match  = ["/*"]
        frontend_endpoints = ["projfrontendendpoint", "${local.frontendendpoint2}"]
        forwarding_configuration {
          forwarding_protocol = "MatchRequest"
          backend_pool_name   = "projbackendpool"
        }
      }

      backend_pool_load_balancing {
        name                        = "projloadbalancesettings"
        sample_size                 = 255
        successful_samples_required = 1
      }

      backend_pool_health_probe {
        name                = "projhealthprobesettings"
        path                = "/health/probe"
        protocol            = "Https"
        interval_in_seconds = 240
      }

      backend_pool {
     name        = "projbackendpool"
     dynamic "backend" {
        for_each = var.backend_pool_settings.value.backend[*]
        content {
          address     = backend.address
          host_header = backend.host_header
          http_port   = backend.http_port
          https_port  = backend.https_port
          priority    = backend.priority
          weight      = backend.weight
          enabled     = backend.enabled
        }
      }
      load_balancing_name = "projloadbalancesettings"
      health_probe_name   = "projhealthprobesettings"
    }

      frontend_endpoint {
        name      = "projfrontendendpoint"
        host_name = format("testingfrontdoor.azurefd.net")
      }

      frontend_endpoint {
        name      = local.frontendendpoint2
        host_name = format("portal-staging.terraform.example")
      }

    }

现在我得到的错误是: │ 错误:不支持的属性 │ │ 在 frontdoor.tf 第 96 行，资源“azurerm_frontdoor”“jctestingfrontdoor”中: │ 96: for_each = var.backend_pool_settings.value.backend[* ] │ ├────────────── │ │ var.backend_pool_settings 是一个对象列表，只有在应用后才知道 │ │ 无法访问对象列表上的属性。您的意思是访问列表中特定元素的属性，还是列表中所有元素的属性？

Answer 1

我已经通过使用 map 变量设法解决了这个问题。基本上，前门不需要指定后端的对象，因为它已经知道它正在构建后端。我还尝试了一些其他代码并使其正常工作，请参阅我的代码:

mainj.tf

resource "azurerm_frontdoor" "jctestingfrontdoor" {
  depends_on = [
    azurerm_key_vault.jctestingenv_keyvault,
  ]
  name                = "testingfrontdoor"
  resource_group_name = azurerm_resource_group.terraform.name
  routing_rule {
    name               = "projroutingrule"
    accepted_protocols = ["Http", "Https"]
    patterns_to_match  = ["/*"]
    frontend_endpoints = ["projfrontendendpoint", "${local.frontendendpoint2}"]
    forwarding_configuration {
      forwarding_protocol = "MatchRequest"
      backend_pool_name   = "projbackendpool"
    }
  }

  backend_pool_load_balancing {
    name                        = "projloadbalancesettings"
    sample_size                 = 255
    successful_samples_required = 1
  }

  backend_pool_health_probe {
    name                = "projhealthprobesettings"
    path                = "/health/probe"
    protocol            = "Https"
    interval_in_seconds = 240
  }

  backend_pool {
     name        = "projbackendpool"
     dynamic "backend" {
        for_each = var.backend_pool_settings
        content {
          address     = backend.value.address
          host_header = backend.value.host_header
          http_port   = backend.value.http_port
          https_port  = backend.value.https_port
          priority    = backend.value.priority
          weight      = backend.value.weight
          enabled     = backend.value.enabled
        }
      }
      load_balancing_name = "projloadbalancesettings"
      health_probe_name   = "projhealthprobesettings"
    }
  
  frontend_endpoint {
    name      = "projfrontendendpoint"
    host_name = format("testingfrontdoor.azurefd.net")
  }

  frontend_endpoint {
    name      = local.frontendendpoint2
    host_name = format("portal-staging.terraform.example")
  }

}

resource "azurerm_frontdoor_custom_https_configuration" "portal_staging_https_config" {
  depends_on = [
    azurerm_frontdoor.jctestingfrontdoor
  ]
  frontend_endpoint_id              = "${azurerm_frontdoor.jctestingfrontdoor.id}/frontendEndpoints/${local.frontendendpoint2}"
  custom_https_provisioning_enabled = true

  custom_https_configuration {
    certificate_source                      = "AzureKeyVault"
    azure_key_vault_certificate_secret_name = "imported-cert"
    azure_key_vault_certificate_vault_id    = azurerm_key_vault.jctestingenv_keyvault.id
  }
}

variables.tf

variable "backend_pool_settings" {
  description = "backend pool stettings for frontdoor"
  type = map(object({
      address     = string
      host_header = string
      http_port   = number
      https_port  = number
      weight      = number
      priority    = number
      enabled     = bool
  }))
}

inputvariables.tfvars

backend_pool_settings = {
  backendone = {
    address     = "portal-staging-testing1.terraform.example"
    host_header = "portal-staging-testing1.terraform.example"
    http_port   = 80
    https_port  = 443
    priority    = 1
    weight      = 50
    enabled     = true
  },

  backendtwo = {
    address     = "portal-staging-testing2.terraform.example"
    host_header = "portal-staging-testing2.terraform.example"
    http_port   = 80
    https_port  = 443
    priority    = 1
    weight      = 50
    enabled     = true
  }
}

这篇文章还帮助我解决了使用 Terraform 处理 map 对象的问题:https://serverfault.com/questions/1063395/terraform-values-from-tfvars-are-not-loading-when-using-multi-level-maps