google-cloud-platform - Terraform 总是尝试替换 gcp 计算实例而不进行更改-6ren

google-cloud-platform - Terraform 总是尝试替换 gcp 计算实例而不进行更改

转载作者：行者123 更新时间：2023-12-04 07:19:48

早上好
我的 terraform 代码有问题。我在特定模块中以下列方式定义了两个 gcp 计算实例:


resource "google_compute_instance" "dev_machine" {
  name = "dev-machine-${var.tag}"
  deletion_protection = true
  machine_type = "e2-standard-2"

  boot_disk {
      initialize_params {
        image = "ubuntu-os-pro-cloud/ubuntu-pro-2004-lts"
        size = 200
      }
  }

  network_interface {
    network = var.vpc.name
    subnetwork = var.subnet.name
    access_config {
      
    }
  }

  tags = ["dev-vm-${var.tag}"]
}


resource "google_compute_instance" "dev_machine-minor" {
  name = "dev-machine-minor-${var.tag}"
  deletion_protection = true
  
  machine_type = "n1-standard-1"

  boot_disk {
      initialize_params {
        image = "ubuntu-os-pro-cloud/ubuntu-pro-2004-lts"
        size = 30
      }
  }

  network_interface {
    network = var.vpc.name
    subnetwork = var.subnet.name
    access_config {
      
    }
  }

  tags = ["dev-vm-${var.tag}"]
}

resource "google_compute_firewall" "ssh_access" {
  name = "allow-ssh-access-${var.tag}"
  network = var.vpc.name

  allow {
    protocol = "tcp"
    ports = ["22"]
  }

  source_ranges = [ "0.0.0.0/0" ]
  target_tags = ["dev-vm-${var.tag}"]
}

变量定义如下:

variable "vpc" {
  description = "vpc to deploy instance"
}

variable "subnet" {
  description = "subnet to deploy the subnet"
}


variable "tag" {
  description = "general project tag"
}

当我运行命令“terraform apply”时，一切都按预期工作，但如果我再次运行它，它总是指出必须替换实例，即使我没有对代码进行任何更改。当我通过 ssh 连接到实例时，我注意到一切都被清除了。
这是“terraform plan”的输出，代码没有更改:

An execution plan has been generated and is shown below.
Resource actions are indicated with the following symbols:
-/+ destroy and then create replacement

Terraform will perform the following actions:

  # module.dev_environment.google_compute_instance.dev_machine must be replaced
-/+ resource "google_compute_instance" "dev_machine" {
      ~ cpu_platform         = "Intel Broadwell" -> (known after apply)
      ~ current_status       = "RUNNING" -> (known after apply)
      ~ deletion_protection  = false -> true
      - enable_display       = false -> null
      ~ guest_accelerator    = [] -> (known after apply)
      ~ id                   = "<id with project>" -> (known after apply)
      ~ instance_id          = "<instance id>" -> (known after apply)
      ~ label_fingerprint    = "<label fingerprint>" -> (known after apply)
      - labels               = {} -> null
      - metadata             = {} -> null
      ~ metadata_fingerprint = "<metadata fingerprint>=" -> (known after apply)
      + min_cpu_platform     = (known after apply)
        name                 = "dev-machine-pweather"
      ~ project              = "<project id>" -> (known after apply)
      - resource_policies    = [] -> null
      ~ self_link            = "<project id url>/instances/dev-machine-pweather" -> (known after apply)
        tags                 = [
            "dev-vm-pweather",
        ]
      ~ tags_fingerprint     = "<tag fingerprint>" -> (known after apply)
      ~ zone                 = "us-east4-a" -> (known after apply)
        # (2 unchanged attributes hidden)

      ~ boot_disk {
          ~ device_name                = "persistent-disk-0" -> (known after apply)
          + disk_encryption_key_sha256 = (known after apply)
          + kms_key_self_link          = (known after apply)
          ~ source                     = "<project id url>/us-east4-a/disks/dev-machine-pweather" -> (known after apply)
            # (2 unchanged attributes hidden)

          ~ initialize_params {
              ~ image  = "https://www.googleapis.com/compute/v1/projects/ubuntu-os-pro-cloud/global/images/ubuntu-pro-2004-focal-v20210720" -> "ubuntu-os-pro-cloud/ubuntu-pro-2004-lts" # forces replacement
              ~ labels = {} -> (known after apply)
              ~ type   = "pd-standard" -> (known after apply)
                # (1 unchanged attribute hidden)
            }
        }

      + confidential_instance_config {
          + enable_confidential_compute = (known after apply)
        }

      ~ network_interface {
          ~ name               = "nic0" -> (known after apply)
          ~ network            = "<project id url>/global/networks/pweather-vpc" -> "pweather-vpc"
          ~ network_ip         = "10.0.0.17" -> (known after apply)
          ~ subnetwork         = "<project id url>/subnetworks/pweather-subnet" -> "pweather-subnet"
          ~ subnetwork_project = "<project>" -> (known after apply)

          ~ access_config {
              ~ nat_ip       = "<NAT IP> -> (known after apply)
              ~ network_tier = "PREMIUM" -> (known after apply)
            }
        }

      + reservation_affinity {
          + type = (known after apply)

          + specific_reservation {
              + key    = (known after apply)
              + values = (known after apply)
            }
        }

      ~ scheduling {
          ~ automatic_restart   = true -> (known after apply)
          ~ min_node_cpus       = 0 -> (known after apply)
          ~ on_host_maintenance = "MIGRATE" -> (known after apply)
          ~ preemptible         = false -> (known after apply)

          + node_affinities {
              + key      = (known after apply)
              + operator = (known after apply)
              + values   = (known after apply)
            }
        }

      - shielded_instance_config {
          - enable_integrity_monitoring = true -> null
          - enable_secure_boot          = false -> null
          - enable_vtpm                 = true -> null
        }
    }

  # module.dev_environment.google_compute_instance.dev_machine-minor must be replaced
-/+ resource "google_compute_instance" "dev_machine-minor" {
      ~ cpu_platform         = "Intel Broadwell" -> (known after apply)
      ~ current_status       = "RUNNING" -> (known after apply)
      ~ deletion_protection  = false -> true
      - enable_display       = false -> null
      ~ guest_accelerator    = [] -> (known after apply)
      ~ id                   = "<project id url>/instances/dev-machine-minor-pweather" -> (known after apply)
      ~ instance_id          = "<instance id>" -> (known after apply)
      ~ label_fingerprint    = "<label fingerprint>" -> (known after apply)
      - labels               = {} -> null
      - metadata             = {} -> null
      ~ metadata_fingerprint = "udK04sf2kcQ=" -> (known after apply)
      + min_cpu_platform     = (known after apply)
        name                 = "dev-machine-minor-pweather"
      ~ project              = "<project name>" -> (known after apply)
      - resource_policies    = [] -> null
      ~ self_link            = "<project id url>/us-east4-a/instances/dev-machine-minor-pweather" -> (known after apply)
        tags                 = [
            "dev-vm-pweather",
        ]
      ~ tags_fingerprint     = "<tag fingerprint>" -> (known after apply)
      ~ zone                 = "us-east4-a" -> (known after apply)
        # (2 unchanged attributes hidden)

      ~ boot_disk {
          ~ device_name                = "persistent-disk-0" -> (known after apply)
          + disk_encryption_key_sha256 = (known after apply)
          + kms_key_self_link          = (known after apply)
          ~ source                     = "<project id url>/us-east4-a/disks/dev-machine-minor-pweather" -> (known after apply)
            # (2 unchanged attributes hidden)

          ~ initialize_params {
              ~ image  = "https://www.googleapis.com/compute/v1/projects/ubuntu-os-pro-cloud/global/images/ubuntu-pro-2004-focal-v20210720" -> "ubuntu-os-pro-cloud/ubuntu-pro-2004-lts" # forces replacement
              ~ labels = {} -> (known after apply)
              ~ type   = "pd-standard" -> (known after apply)
                # (1 unchanged attribute hidden)
            }
        }

      + confidential_instance_config {
          + enable_confidential_compute = (known after apply)
        }

      ~ network_interface {
          ~ name               = "nic0" -> (known after apply)
          ~ network            = "<project id url>>/global/networks/pweather-vpc" -> "pweather-vpc"
          ~ network_ip         = "10.0.0.16" -> (known after apply)
          ~ subnetwork         = "<project id url>/us-east4/subnetworks/pweather-subnet" -> "pweather-subnet"
          ~ subnetwork_project = "<project>" -> (known after apply)

          ~ access_config {
              ~ nat_ip       = "<NAT IP>" -> (known after apply)
              ~ network_tier = "PREMIUM" -> (known after apply)
            }
        }

      + reservation_affinity {
          + type = (known after apply)

          + specific_reservation {
              + key    = (known after apply)
              + values = (known after apply)
            }
        }

      ~ scheduling {
          ~ automatic_restart   = true -> (known after apply)
          ~ min_node_cpus       = 0 -> (known after apply)
          ~ on_host_maintenance = "MIGRATE" -> (known after apply)
          ~ preemptible         = false -> (known after apply)

          + node_affinities {
              + key      = (known after apply)
              + operator = (known after apply)
              + values   = (known after apply)
            }
        }

      - shielded_instance_config {
          - enable_integrity_monitoring = true -> null
          - enable_secure_boot          = false -> null
          - enable_vtpm                 = true -> null
        }
    }

Plan: 2 to add, 0 to change, 2 to destroy.

Changes to Outputs:
  ~ vm_ip = "<VM IP>" -> (known after apply)

------------------------------------------------------------------------

Note: You didn't specify an "-out" parameter to save this plan, so Terraform
can't guarantee that exactly these actions will be performed if
"terraform apply" is subsequently run.

我试图查看文档，但是(据我了解)我没有找到任何可以帮助我的东西。是我做错了什么还是提供商中的错误？谢谢!
编辑 1:添加了“terraform plan”命令的输出。

最佳答案

根据计划输出，强制替换的参数值为:

~ boot_disk {
      ...
      ~ initialize_params {
          ~ image  = "https://www.googleapis.com/compute/v1/projects/ubuntu-os-pro-cloud/global/images/ubuntu-pro-2004-focal-v20210720" -> "ubuntu-os-pro-cloud/ubuntu-pro-2004-lts" # forces replacement
      }
}

如果您愿意从 ubuntu-os-pro-cloud/ubuntu-pro-2004-lts 更新值至 https://www.googleapis.com/compute/v1/projects/ubuntu-os-pro-cloud/global/images/ubuntu-pro-2004-focal-v20210720 ，那么这将阻止对资源应用删除/创建操作。
但是，这里的另一个问题是为什么您的参数值为 image在改变。如果您更改了配置或有人手动更改了资源的属性，那么这些将导致更改。但是，你说没有发生。提供者可能会在验证期间尝试自动更正和修改值，但根据 documentation ，你的值是完全有效的。因此，这可能是该资源架构的提供程序中的错误。

关于google-cloud-platform - Terraform 总是尝试替换 gcp 计算实例而不进行更改，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/68574608/

文章推荐： python - 更新以具有重复索引的叉积索引的 2D NumPy 数组

文章推荐： azure-data-lake - 输入和输出文件夹位置的配置文件

文章推荐： javascript - 如何使用 Cloudflare 工作人员进行 A/B 测试

java - 为什么 double 总是 8 个字节，而 int 总是 4 个字节，即使 int 有更多位数？
我不明白 int 63823 为何比 double 1.0 占用更少的空间。在这个特定实例中，int 中是否没有存储更多信息？最佳答案 I don't understand how an int 6
ios - (总是)在使用加密来验证用户身份时向美国当局报告？
这可能不是一个直接的代码问题，但它是一个经常出现在 SO 上的问题，我发现阅读它非常有用。 App Store - Help answering “Missing Compliance” (using
css - 如何在下拉框顶部显示下拉列表(总是)
我在我们的应用程序中使用 syncfusion 寻呼机和下拉列表请打开以下链接。 https://stackblitz.com/edit/angular-nv6myv?file=src%2Fapp%2
c++ - *新总是错的。总是
以便解释指针和引用in this question我写了这段代码。 MyClass& MyClass::MyInstance() { static MyClass & myLoca
c++ - 协助避免断言......总是!
在 C 和 C++ 中，assert 是一个非常重量级例程，将错误写入 stdout 并终止程序。在我们的应用程序中，我们实现了一个更强大的 assert 替代品，并为其提供了自己的宏。已尽一切努力
c# - 此请求的授权已被拒绝。总是
我已经创建了一个 MVC webApi 项目，现在我想使用身份验证和授权。我想我已经实现了这种安全措施，但由于某种原因，有些事情变糟了，当我编写我的凭据并尝试调用一些 webApi 方法时，显示消息“
javascript - 向函数添加回调 - 总是
我发现自己使用一种奇怪的方式向我的函数添加回调函数，我想知道是否有更通用的方式向函数添加回调函数，最好的情况是我的所有函数都检查最后给定的作为函数的参数，如果是，则将其用作回调。我以前是这样的: v
git - 总是 `git fetch --all` ？
几乎从来没有我只想获取某个 Remote 的情况；我总是想要所有的 Remote 。我认为这将是一个足够常见的用例，git 会考虑它(与他们有 pull.rebase true 的方式相同)。那么，
jQuery .inArray() 总是 true？
我正在尝试使用 inarray 但它总是返回 true？有任何想法吗？ (所有 li 均已显示) $("#select-by-color-list li").hide(); // get the se
lighttpd mod_secdownload 总是 404
我正在尝试为我公司的开发环境设置过期网址。我们使用 lighttpd在此环境中提供上传的文件，我发现 these docs这似乎相当有希望。问题是我似乎根本无法让它工作，而且我有点不知所措，试图找出
Grails 外部配置。无法访问外部变量。总是[:]
我无法让“文件夹”外部变量工作。我总是得到[:]。我正在 Windows 下的 Grails 上进行开发(这就是为什么外部配置文件看起来像 file:C:\path\to/file)。我在另一个项
haskell - `if-then-else`(总是)可以被函数调用替换吗？
这个问题是出于对 PL 如何工作的好奇，而不是其他任何事情。 (它实际上是在查看与 Haskell 不同的 SML 时想到的，因为前者使用按值调用 - 但我的问题是关于 Haskell。) Haske
verilog - 总是 block 中的for循环
我有一个高速缓存内存模块，我希望它是可字寻址的，但有字节的写使能信号。 always @ (posedge clk) begin //stuff... if(write) begin
java - 匿名类*总是*维护对其封闭实例的引用吗？
我正在处理一些代码，其中一个对象“foo”正在创建另一个对象对象“bar”，并向其传递一个Callable。之后 foo 将返回bar，然后我希望 foo 变得无法访问(即:可用于垃圾收集)。我最初
C# 总是 0 个参数
我已将我的程序与此方法相关联: public static void CreateFileAssociation(string extension, string key, string descri
C opendir 总是 NULL
所以我正在进行目录遍历，但我无法让 opendir 按照我想要的方式工作。它总是无法打开我发送的目录，它给出了一些未知的错误。我通常传入 argv[1]，但我放弃了，只是开始硬编码路径。 char *
java - 从不运行 `if` ，总是 `else`
这个问题在这里已经有了答案: How do I compare strings in Java? (23 个回答) 关闭 9 年前。出于某种原因，我的(基本)程序总是打印我为 else 语句保留的
python - 如何将(总是)时间四舍五入到最接近的十位？
我不想冒为此提出破解的风险，因为它涉及 datetime 对象。基本上，我想按如下方式进行转换: 2010-04-21 06:37:53 -> 2010-04-21 06:40:00 2010-08-
C: fgets 总是 NULL
我正在用 C 语言玩文件 I/O。我正在尝试使用 fgets 从一个文件中读取数据并将其输出到另一个文件。问题是它总是返回 NULL，因此没有任何内容被复制到输出文件中。这是我的代码: #includ
C++:不删除对象/总是/内存泄漏吗？
class MyClass { // empty class with no base class }; int main() { MyClass* myClass = new MyC

行者123

个人简介

我是一名优秀的程序员,十分优秀！

作者热门文章

滴滴打车优惠券免费领取

全站热门文章

首页

博学

6Ren·AI

商城

google-cloud-platform - Terraform 总是尝试替换 gcp 计算实例而不进行更改