用于 Azure Key Vault 的 Terraform 和导出块版本的属性答案

【问题标题】：Terraform and exporting block versions of Attributes for Azure Key Vault用于 Azure Key Vault 的 Terraform 和导出块版本的属性
【发布时间】：2020-11-19 03:00:31
【问题描述】：

将 Terraform 与 Azure 搜索服务一起使用，它将 query_keys 导出为带有 key 的“块”，并且姓名...

在“属性参考”部分... https://www.terraform.io/docs/providers/azurerm/r/search_service.html

我已经将 ID 和主键从 Terraform 代码导出到 Azure KeyVault，但是如何为“块”属性执行此操作？

# Key vault secrets
resource "azurerm_key_vault_secret" "go-1a" {
  name          = "secret-Search01-ID"
  value         = azurerm_search_service.go-1.id
  key_vault_id  = data.azurerm_key_vault.env-keyvault.id
}
resource "azurerm_key_vault_secret" "go-1b" {
  name          = "secret-Search01-PrimaryKey"
  value         = azurerm_search_service.go-1.primary_key
  key_vault_id  = data.azurerm_key_vault.env-keyvault.id
}

提前致谢

【问题讨论】：

标签： terraform terraform-provider-azure

【解决方案1】：

query_keys 是一个对象列表。

示例代码

provider "azurerm" {
  version = "~>2.19.0"
  features {}
}

resource "azurerm_resource_group" "example" {
  name     = "example-resources"
  location = "East US"
}

resource "azurerm_search_service" "example" {
  name                = "example-search-service"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location
  sku                 = "standard"
}

output "query_keys_key" {
    value = azurerm_search_service.example.query_keys[0].key
}

output "query_keys_name" {
    value = azurerm_search_service.example.query_keys[0].name
}

示例输出

> terraform apply
azurerm_resource_group.example: Refreshing state... [id=/subscriptions/redacted/resourceGroups/example-resources]
azurerm_search_service.example: Refreshing state... [id=/subscriptions/redacted/resourceGroups/example-resources/providers/Microsoft.Search/searchServices/example-search-service]

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

query_keys_key = 662EEE1DD452E082922C1AF00B0BBFA9
query_keys_name =

运行terraform show查看

> terraform show
# azurerm_resource_group.example:
resource "azurerm_resource_group" "example" {
    id       = "/subscriptions/redacted/resourceGroups/example-resources"
    location = "eastus"
    name     = "example-resources"
}

# azurerm_search_service.example:
resource "azurerm_search_service" "example" {
    id                  = "/subscriptions/redacted/resourceGroups/example-resources/providers/Microsoft.Search/searchServices/example-search-service"
    location            = "eastus"
    name                = "example-search-service"
    partition_count     = 1
    primary_key         = "3EE7E9F80715E0451EEBC25196808563"
    query_keys          = [
        {
            key  = "662EEE1DD452E08292BC1AF01B0BBFA9"
            name = ""
        },
    ]
    replica_count       = 1
    resource_group_name = "example-resources"
    secondary_key       = "11CCA067EEC7E04FC1F39582FD01C316"
    sku                 = "standard"
}

【讨论】：