在列表中提供子网并使用 terraform 访问它们

Question

我一个一个地给出子网，我想把它放在一个列表中，但如果我这样做了，我将如何能够访问列表中的特定子网，我很困惑。我想对可用区做同样的事情.就像如果我想给public_subnet_cidr_2 如果它在列表中，我将如何给它。

main.tf

module "my_vpc" {
  source   = "./modules/vpc"
  vpc_cidr = "13.0.0.0/16"
  #tenancy               = "default"
  vpc_id                = "${module.my_vpc.vpc_id}"
  public_subnet_cidr_1  = "13.0.1.0/24"
  public_subnet_cidr_2  = "13.0.2.0/24"
  private_subnet_cidr_1 = "13.0.3.0/24"
  private_subnet_cidr_2 = "13.0.4.0/24"
  availability_zone_1   = "us-east-2a"
  availability_zone_2   = "us-east-2b"
}

vpc-main.tf

resource "aws_vpc" "main" {
  cidr_block = var.vpc_cidr
  tags = {
    Name = "wahaj-vpc"
  }
}

# Define the public subnet
resource "aws_subnet" "public_subnet_1" {
  vpc_id     = var.vpc_id
  cidr_block = var.public_subnet_cidr_1

  availability_zone = var.availability_zone_1

  tags = {
    Name = "Public Subnet 1"
  }
}

resource "aws_subnet" "public_subnet_2" {
  vpc_id     = var.vpc_id
  cidr_block = var.public_subnet_cidr_2

  availability_zone = var.availability_zone_2

  tags = {
    Name = "Public Subnet 2"
  }
}

# Define the private subnet
resource "aws_subnet" "private_subnet_1" {
  vpc_id            = var.vpc_id
  cidr_block        = var.private_subnet_cidr_1
  availability_zone = var.availability_zone_1

  tags = {
    Name = "Private Subnet 1"
  }
}

resource "aws_subnet" "private_subnet_2" {
  vpc_id            = var.vpc_id
  cidr_block        = var.private_subnet_cidr_2
  availability_zone = var.availability_zone_2

  tags = {
    Name = "Private Subnet 2"
  }
}
# Define the internet gateway
resource "aws_internet_gateway" "gw" {
  vpc_id = var.vpc_id

  tags = {
    Name = "VPC IGW"
  }
}

# Define the route table
resource "aws_route_table" "web_public_rt" {
  vpc_id = var.vpc_id

  route {
    cidr_block = "0.0.0.0/0"
    gateway_id = aws_internet_gateway.gw.id
  }

  tags = {
    Name = "Public Subnet RT"
  }
}

# Assign the route table to the public Subnet
resource "aws_route_table_association" "web-public-rt" {
  subnet_id      = aws_subnet.public_subnet_1.id
  route_table_id = aws_route_table.web_public_rt.id
}

Answer 1

您的代码中有几个明显的问题：

• 您不能拥有 CIDR 为 13.0.0.0/16 的 VPC。我想应该是10.0.0.0/16。
• 这也是创建 VPC 的一种非常不寻常的方式，aws_vpc 位于模块外部。
• 该模块也缺少public_subnet_1。
• 最好使用列表作为变量，而不是传递单独的public_subnet_cidr_1、public_subnet_cidr_2 等。
• 我看不出你为什么需要硬核availability_zone_1 和availability_zone_2。最好使用data 来源。

无论如何，我修改了您的文件，以便部署它们。我在我的沙盒帐户的us-east-1 区域验证。请注意，我只是在对您的代码进行最小更改的情况下进行部署。我尚未验证 VPC 是否正常运行，也未按预期工作。

ma​​in.tf

provider "aws" {
  # your data
}

resource "aws_vpc" "main" {
  cidr_block       = "10.0.0.0/16"

  tags = {
    Name = "main"
  }
}


module "my_vpc" {
  source   = "./modules/vpc"
  vpc_cidr = "10.0.0.0/16"
  vpc_id                = aws_vpc.main.id
  public_subnet_cidr_1  = "10.0.1.0/24"
  public_subnet_cidr_2  = "10.0.2.0/24"
  private_subnet_cidr_1 = "10.0.3.0/24"
  private_subnet_cidr_2 = "10.0.4.0/24"
  availability_zone_1   = "us-east-1a"
  availability_zone_2   = "us-east-1b"
}

模块/vpc/vpc.tf

variable "vpc_id" {}
variable "vpc_cidr" {}
variable "public_subnet_cidr_1" {}
variable "public_subnet_cidr_2" {}
variable "private_subnet_cidr_1" {}
variable "private_subnet_cidr_2" {}
variable "availability_zone_1" {}
variable "availability_zone_2" {}


resource "aws_subnet" "public_subnet_1" {
  vpc_id     = var.vpc_id
  cidr_block = var.public_subnet_cidr_1

  availability_zone = var.availability_zone_1

  tags = {
    Name = "Public Subnet 1"
  }
}


resource "aws_subnet" "public_subnet_2" {
  vpc_id     = var.vpc_id
  cidr_block = var.public_subnet_cidr_2

  availability_zone = var.availability_zone_2

  tags = {
    Name = "Public Subnet 2"
  }
}

# Define the private subnet
resource "aws_subnet" "private_subnet_1" {
  vpc_id            = var.vpc_id
  cidr_block        = var.private_subnet_cidr_1
  availability_zone = var.availability_zone_1

  tags = {
    Name = "Private Subnet 1"
  }
}

resource "aws_subnet" "private_subnet_2" {
  vpc_id            = var.vpc_id
  cidr_block        = var.private_subnet_cidr_2
  availability_zone = var.availability_zone_2

  tags = {
    Name = "Private Subnet 2"
  }
}
# Define the internet gateway
resource "aws_internet_gateway" "gw" {
  vpc_id = var.vpc_id

  tags = {
    Name = "VPC IGW"
  }
}

# Define the route table
resource "aws_route_table" "web_public_rt" {
  vpc_id = var.vpc_id

  route {
    cidr_block = "0.0.0.0/0"
    gateway_id = aws_internet_gateway.gw.id
  }

  tags = {
    Name = "Public Subnet RT"
  }
}

# Assign the route table to the public Subnet
resource "aws_route_table_association" "web-public-rt" {
  subnet_id      = aws_subnet.public_subnet_1.id
  route_table_id = aws_route_table.web_public_rt.id
}