如何在默认 VPC 中启动 EFS？

Question

我正在尝试在我的默认 VPC 中启动 EFS 文件系统。我能够创建 EFS，但无法在所有子网中安装目标。在subnet_id 我不确定如何传递默认 VPC 的所有子网 ID 的值。下面是我的 Terraform 代码：​​

$ cat ec2.tf

provider "aws" {
 [enter image description here][1]region  = "ap-south-1"
 profile = "saumikhp"
}


data "aws_vpc" "default" {
  default = true
}

data "aws_subnet_ids" "example" {
  vpc_id = var.vpc_id
}

data "aws_subnet" "example" {
  for_each = data.aws_subnet_ids.example.ids
  id       = each.value
}


resource "aws_key_pair" "key" {
  key_name   = "mykey12345"
  public_key = file("mykey12345.pub")
}

resource "aws_security_group" "web-sg" {
  name        = "web-sg"
  description = "Allow port 22 and 80"
  vpc_id      = "vpc-18819d70"

  ingress {
    from_port   = 22
    to_port     = 22
    protocol    = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
  }

  egress {
    from_port   = 0
    to_port     = 0
    protocol    = "-1"
    cidr_blocks = ["0.0.0.0/0"]
  }

  ingress {
    from_port   = 2049
    to_port     = 2049
    protocol    = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
  }
  ingress {
    from_port   = 80
    to_port     = 80
    protocol    = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
  }
  tags = {
    Name = "web-sg"
  }
}

resource "aws_instance" "myinstance" {
  ami             = "ami-0447a12f28fddb066"
  instance_type   = "t2.micro"
  key_name        = "mykey12345"
  security_groups = ["web-sg"]

  connection {
    type        = "ssh"
    user        = "ec2-user"
    private_key = file("mykey12345")
    host        = aws_instance.myinstance.public_ip
  }

  provisioner "remote-exec" {
    inline = [
      "sudo yum install httpd php git -y",
      "sudo systemctl restart httpd",
      "sudo systemctl enable httpd",
    ]
  }
  tags = {
    Name = "SaumikOS"
  }
}

resource "aws_efs_file_system" "efs" {
   creation_token = "efs"
   performance_mode = "generalPurpose"
   throughput_mode = "bursting"
   encrypted = "true"
 tags = {
     Name = "EfsExample"
   }
 }

resource "aws_efs_mount_target" "efs-mt" {
  depends_on = [
    aws_instance.myinstance,
  ]
  for_each        = data.aws_subnet_ids.example.ids
  subnet_id = each.value
  file_system_id  = "aws_efs_file_system.efs.id"
  security_groups = ["aws_security_group.web-sg.id"]
}

Error after running terraform apply

Answer 1

您可以使用aws_vpc 和aws_subnet_ids data sources 的组合从默认VPC 获取子网。

data "aws_vpc" "default" {
  default = true
}

data "aws_subnet_ids" "example" {
  vpc_id = var.vpc_id
}

然后，您可以通过循环在每个子网中创建 EFS 挂载目标（每个挂载目标只需要一个 subnet_id）：

resource "aws_efs_mount_target" "efs-mt" {
  for_each        = data.aws_subnet_ids.example.ids
  file_system_id  = aws_efs_file_system.efs.id
  subnet_id       = each.value
  security_groups = [aws_security_group.web-sg.id]
}