![Terraform - 动态安全规则在 Azure 中不起作用](https://linux22.com/image/771826/Terraform%20-%20%E5%8A%A8%E6%80%81%E5%AE%89%E5%85%A8%E8%A7%84%E5%88%99%E5%9C%A8%20Azure%20%E4%B8%AD%E4%B8%8D%E8%B5%B7%E4%BD%9C%E7%94%A8.png)
我无法看到 Azure 网络安全组 (NSG) 中创建的动态规则。我的模板在验证检查中看起来没问题。但是,当我运行 terraform apply 时,NSG 创建的规则没有我放在动态规则部分下的自定义规则。由于这是模块的一部分,我必须使用一些逻辑进行迭代。
下面是来自 module.tf 文件中的代码
resource "azurerm_network_security_group" "nsg" {
for_each = var.subnet_prefix
name = lower("nsg_${each.key}_in")
resource_group_name = var.vnet_resourcegroup
location = var.location
dynamic "security_rule" {
for_each = lookup (each.value, "nsg_rules", [])
content {
name = lookup(security_rule.value,"name",null)
description = lookup(security_rule.value, "description", null)
priority = lookup(security_rule.value,"priority",null)
direction = lookup(security_rule.value,"direction",null)
access = lookup(security_rule.value,"access",null)
protocol = lookup(security_rule.value,"protocol",null)
source_port_range = "*"
destination_port_range = lookup(security_rule.value,"destination_port_range",null)
source_address_prefix = lookup(security_rule.value,"source_address_prefix",null)
destination_address_prefix = lookup(security_rule.value,"destination_address_prefix",null)
}
}
}
这些值将来自 terraform.tfvars 文件,我已将其声明如下。为了符合要求,我已使用随机文本删除了原始值。
subnet_prefix = {
sa0 = {
prefix = "dc-subnet"
address_space = ["XXXXXX"]
nsg_name = "nsg0"
nsg_rules = [
{
name = "rule1"
description = "XXXXXX"
priority = 220
direction = "Outbound"
access = "Allow"
protocol = "*"
source_port_range = "*"
source_port_ranges = null
destination_port_range = *
destination_port_ranges = null
source_address_prefix = "*"
source_address_prefixes = null
destination_address_prefix = "X.X.X.X/26"
destination_address_prefixes = null
source_application_security_group_names = []
destination_application_security_group_names = []
}
]
}
}
答案1
请尝试以下操作:
你试过吗<https://stackoverflow.com/questions/73322355/dynamic-block-is-able-to-add-nsg-rules-properly-but-unable-to-remove-all-the-rul?noredirect=1#comment129487832_73322355> 这是我的问题,但动态正在工作,只是无法删除所有安全规则。您可以删除直到剩下一个项目。但无法删除项目 0