amazon-web-services - Terraform如何在路由表中获取动态路由

Question

Terraform 如何基于工作区获取路由表中的动态路由

UAT

resource "aws_vpn_gateway" "micorsoft_vpn_gw" { 
  vpc_id = aws_vpc.default.id

  tags = {
    Name = "micorsoft"
  }
}

resource "aws_route_table" "private" { 
  vpc_id = aws_vpc.default.id
  route {
    cidr_block     = "0.0.0.0/0"
    nat_gateway_id = aws_nat_gateway.default.id
  }
  
  route {
    cidr_block     = "0.0.0.0/0"
    gateway_id     =  aws_vpn_gateway.micorsoft_vpn_gw.id
  }

  tags = merge(map("Name", "${var.namespace}-${var.environment}"), var.tags)
}

DEV

resource "aws_route_table" "private" { 
  vpc_id = aws_vpc.default.id
  route {
    cidr_block     = "0.0.0.0/0"
    nat_gateway_id = aws_nat_gateway.default.id
  }
 
  tags = merge(map("Name", "${var.namespace}-${var.environment}"), var.tags)
}

如何实现这是基于工作空间/环境的动态方式

Answer 1

您可以使用 dynamic block为了那个原因。

resource "aws_route_table" "private" { 
  vpc_id = aws_vpc.default.id

  route {
    cidr_block     = "0.0.0.0/0"
    nat_gateway_id = aws_nat_gateway.default.id
  }
  
  dynamic "route" {
      for_each = var.env == "DEV" ? toset([]) : toset([1])
      content {
        cidr_block     = "0.0.0.0/0"
        gateway_id     =  aws_vpn_gateway.micorsoft_vpn_gw.id
      }      
  }

  tags = merge(map("Name", "${var.namespace}-${var.environment}"), var.tags)
}

基本上，当 var.env是 DEV , 没有第二 route将被创建。