azure - Terraform 提示父资源不存在，即使存在

Question

我正在尝试使用 terraform 在 azure 中创建一些资源。

我有:

resource "azurerm_log_analytics_workspace" "logws" {
  name                = lower("log-${var.env}-${local.location_prefix[coalesce(var.location)]}-${random_string.postfix.result}")
  resource_group_name = azurerm_resource_group.rg[0].name
  location            = azurerm_resource_group.rg[0].location
  sku                 = var.log_analytics_workspace_sku
  retention_in_days   = var.log_analytics_logs_retention_in_days
  tags                = local.common_tags
}



resource "azurerm_monitor_private_link_scoped_service" "logscopelink" {
  name                = "scoped-${azurerm_log_analytics_workspace.logws.name}"
  resource_group_name = azurerm_resource_group.rg[0].name
  scope_name          = azurerm_log_analytics_workspace.logws.name
  linked_resource_id = azurerm_log_analytics_workspace.logws.id
  depends_on = [azurerm_log_analytics_workspace.logws]
}

日志分析工作区已创建，但当它尝试创建private_link_scoped_service时，它失败并提示找不到父资源。

我得到的错误:

│ Error: creating/updating Private Link Scoped Service: (Scoped Resource Name "scoped-log-sbx-we-oe728m" / Private Link Scope Name "log-sbx-we-oe728m" / Resource Group "hub"): insights.PrivateLinkScopedResourcesClient#CreateOrUpdate: Failure sending request: StatusCode=404 -- Original Error: Code="ParentResourceNotFound" Message="Can not perform requested operation on nested resource. Parent resource 'log-sbx-we-oe728m' not found."

我通过azure门户验证，logws确实存在。

有人可以建议这里出了什么问题吗？

Answer 1

您需要创建一个新的 azurerm_monitor_private_link_scope 资源，然后在 azurerm_monitor_private_link_scoped_service 资源的 scope_name 属性中引用它，例如:

resource "azurerm_log_analytics_workspace" "logws" {
  name                = lower("log-${var.env}-${local.location_prefix[coalesce(var.location)]}-${random_string.postfix.result}")
  resource_group_name = azurerm_resource_group.rg[0].name
  location            = azurerm_resource_group.rg[0].location
  sku                 = var.log_analytics_workspace_sku
  retention_in_days   = var.log_analytics_logs_retention_in_days
  tags                = local.common_tags
}

# New resource required
resource "azurerm_monitor_private_link_scope" "example" {
  name                = var.private_link_scope_name
  resource_group_name = azurerm_resource_group.rg[0].name
}

resource "azurerm_monitor_private_link_scoped_service" "logscopelink" {
  name                = "scoped-${azurerm_log_analytics_workspace.logws.name}"
  resource_group_name = azurerm_resource_group.rg[0].name
  scope_name          = azurerm_monitor_private_link_scope.example.name
  linked_resource_id  = azurerm_log_analytics_workspace.logws.id
}

请注意，我已删除显式 depends_on 属性，因为当您引用另一个资源 block 中的资源的属性时，Terraform 可以自行推断资源之间的依赖关系。