Terraform 参数化块

Question

我正在azurerm_app_service 之上创建一个模块。我不想增加输入变量列表来收集更大块的所有可能值，例如site_config。

variable var1{}
variable var2{}
..
..
..
variable varN{}

resource "azurerm_app_service" "example" {
  name                = "example-app-service"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name
  app_service_plan_id = azurerm_app_service_plan.example.id

    site_config {
        key1 = var.var1
        key2 = var.var2
        ...
        ...
        keyN = var.varN
        
      }

  app_settings = {
    "SOME_KEY" = "some-value"
  }
}

我想参数化整个块本身。

类似的东西

variable var_block{
  type = map()
}

resource "azurerm_app_service" "example" {
  name                = "example-app-service"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name
  app_service_plan_id = azurerm_app_service_plan.example.id

      site_config {
        var.var_block   
      }

  app_settings = {
    "SOME_KEY" = "some-value"
  }
}

在 python 世界中寻找 **kwargs 之类的东西。

有没有可能实现？

Answer 1

您可以使用动态块仅从一个点管理所有值，例如，在我的示例中，您可以看到使用局部变量的示例，除此之外，您可以使用变量来处理和管理它们。

在开始之前，您必须使用for_each 和lookup 来查找并验证变量中的值，如果找不到键，则返回空值，这种行为对于可选参数非常有用.

locals {
    site_configs = [
        {
            acr_use_managed_identity_credentials = "value1"
            acr_user_managed_identity_client_id = "value1"
            always_on = "value1"
            app_command_line = "value1"
            cors = "value1"
        },
        {
            acr_use_managed_identity_credentials = "value2"
            acr_user_managed_identity_client_id = "value2"
            always_on = "value2"
            app_command_line = "value2"
            cors = "value2"
        }
    ]
}


resource "azurerm_app_service" "example" {
  name                = var.variable_here
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name
  app_service_plan_id = azurerm_app_service_plan.example.id

  dynamic "syte_config" {
      for_each = local.syte_configs
      content {
          lookup(syte_config.value, "acr_use_managed_identity_credentials", null)
          lookup(syte_config.value, "acr_user_managed_identity_client_id", null)
          lookup(syte_config.value, "always_on", null)
          lookup(syte_config.value, "app_command_line", null)
          lookup(syte_config.value, "cors", null)
      }
  }

  app_settings = {
    "SOME_KEY" = "some-value"
  }
}