主页 / coding / 问题 / 76929901
Accepted
Container-Man
Asked: 2023-08-18 21:40:17 +0800 CST

资源之间的 Terraform 链接 for_each

  • 772

变量.tf

variable "custom_ids" {
  type    = set(string)
  default = ["b4d2d", "c928f140e8"]
}

主.tf

resource "azuread_application" "my-test-app" {
  for_each     = var.custom_ids
  display_name = "testing-application"
  owners       = [data.azuread_client_config.current.object_id , each.value ] 
}

resource "azuread_service_principal" "testing-sp" {
  for_each                     = azuread_application.my-test-app
  application_id               = azuread_application.my-test-app.application_id
  app_role_assignment_required = false
  owners                       = [data.azuread_client_config.current.object_id , each.value]
}

错误消息是：

错误：缺少资源实例键 由于 azuread_application.my-test-app 设置了“for_each”，因此必须在特定实例上访问其属性。│ │ 例如，要与引用资源的索引相关联，请使用： │ azuread_application.my-test-app[each.key]

提到这个：https://developer.hashicorp.com/terraform/language/meta-arguments/for_each#chaining-for_each- Between-resources

这里有什么问题？

新错误：

│ 错误：不支持的属性 │ │ my-service-principals.tf 第 24 行，资源“azure_service_principal”“testing-sp”中： │ 24: application_id = every.value.application_id │ ├───────── ──────── │ │ every.value 是一组字符串 │ │ 该值没有任何属性。

1 个回答

  1. Best Answer

    由于链接 withfor_each意味着您将使用键值对，因此您可以通过执行以下操作来解决此问题：

    resource "azuread_application" "my-test-app" {
  for_each     = var.custom_ids
  display_name = "testing-application"
  owners       = [data.azuread_client_config.current.object_id , each.value ]
}

resource "azuread_service_principal" "testing-sp" {
  for_each                     = azuread_application.my-test-app
  application_id               = each.value.application_id
  app_role_assignment_required = false
  owners                       = each.value.owners
}

    编辑：由于问题的目标与原始帖子不同，因此应如何根据评论进行设置：

    variable "custom_ids" {
  type    = list(string)
  default = ["b4d2d", "c928f140e8"]
}

resource "azuread_application" "my-test-app" {
  display_name = "testing-application"
  owners       = concat([data.azuread_client_config.current.object_id], var.custom_ids] 
}

resource "azuread_service_principal" "testing-sp" {
  application_id               = azuread_application.my-test-app.application_id
  app_role_assignment_required = false
  owners                       = azuread_application.my-test-app.owners
}
    • 3

相关问题