TheDemonLord's questions

我的问题如下 - 我有一个类似下面的本地代码块。我需要根据这些值创建一个 Map（这些值在多个地方使用）。

locals {
  object = {
    1 = {
      name = "val1"
      keys = ["val1"]
    }
    2 = {
      name = "val2"
      keys = ["val2", "val3", "val4"]
    }
  }
  associations = flatten(
    [
      for obj in local.object : [
        for association_key in obj.keys : {
          "${obj.name}-${association_key}" = {
            key             = obj.name
            association_key = association_key
          }
        }
      ]
    ]
  )
}

当我运行 terraform 计划并输出上述内容时，我得到：

testing = [
      + {
          + val1-val1 = {
              + association_key = "val1"
              + key             = "val1"
            }
        },
      + {
          + val2-val2 = {
              + association_key = "val2"
              + key             = "val2"
            }
        },
      + {
          + val2-val3 = {
              + association_key = "val3"
              + key             = "val2"
            }
        },
      + {
          + val2-val4 = {
              + association_key = "val4"
              + key             = "val2"
            }
        },
    ]

然而我需要得到的东西是这样的：

testing = [
          + val1-val1 = {
              + association_key = "val1"
              + key             = "val1"
            }
          + val2-val2 = {
              + association_key = "val2"
              + key             = "val2"
            }
          + val2-val3 = {
              + association_key = "val3"
              + key             = "val2"
            }
          + val2-val4 = {
              + association_key = "val4"
              + key             = "val2"
            }
    ]

原因是对象的键值有很多重复，并且映射中需要有一个唯一的值。

我已尝试此处的解决方案- 但我无法创建我需要的地图。

这是我的情况，我正在尝试将旧的 Azure Frontdoor 实例部署到新版本的 AFD 并通过 Terraform 执行此操作。

以下是我的本地防火墙策略的摘录：

firewall_policy = {
    policy = {
      name     = "policy"
      sku_name = "AzureSKU"
      mode     = "prevention"
      managed_rules_list = [
        {
          type    = "Microsoft_DefaultRuleSet"
          version = "1.1"
          action  = "Block"
          exclusion = [
            {
              match_variable = "QueryStringArgNames"
              operator       = "Contains"
              selector       = "string1"
            },
            {
              match_variable = "RequestBodyPostArgNames"
              operator       = "StartsWith"
              selector       = "string2"
            },
            {
              match_variable = "RequestCookieNames"
              operator       = "EqualsAny"
              selector       = "string3"
            },
            {
              match_variable = "RequestBodyPostArgNames"
              operator       = "Contains"
              selector       = "string4"
            }
          ]
          override = [
            {
              rule_group_name = "RFI"
              rule = [
                {
                  rule_id = "931130"
                  action  = "Block"
                  exclusion = [
                    {
                      match_variable = "RequestBodyPostArgNames"
                      operator       = "Equals"
                      selector       = "string1"
                    },
                    {
                      match_variable = "QueryStringArgNames"
                      operator       = "Contains"
                      selector       = "string2"
                    },
                    {
                      match_variable = "QueryStringArgNames"
                      operator       = "Contains"
                      selector       = "string3"
                    },
                    {
                      match_variable = "QueryStringArgNames"
                      operator       = "Contains"
                      selector       = "string4"
                    }
                  ]
                }
              ]
            },
            {
              rule_group_name = "PHP"
              rule = [
                {
                  rule_id = "933100"
                  enabled = false
                  action  = "Block"
                },
                {
                  rule_id = "933110"
                  enabled = false
                  action  = "Block"
                },
                {
                  rule_id = "933120"
                  enabled = false
                  action  = "Block"
                }
              ]
            }
          ]
        }
      ]
    }

}

如您所见，有很多嵌套对象。

在我的 main.tf 文件中，我调用以下内容：

    module "Azure_FW_Policy_module" {
  for_each                                        = local.firewall_policy
  source                                          = "./frontdoorFirewallPolicy"
  cdn_frontdoor_firewall_policy_name              = each.value.name
  resource_group_name                             = var.resource_group_name
  sku_name                                        = each.value.sku_name
  mode                                            = each.value.mode
  managed_rules_list                              = each.value.managed_rules_list
  managed_rules_exclusion_list                    = each.value.managed_rules_list.exclusion
  managed_rules_overide_list                      = each.value.managed_rules_list.override
  managed_rules_overide_rule_list                 = each.value.managed_rules_list.override.rule
  managed_rules_overide_rule_exclusion_list       = each.value.managed_rules_list.override.rule.exclusion
  managed_rules_overide_rule_group_exclusion_list = each.value.managed_rules_list.override.exclusion
  custom_rules_list                               = each.value.custom_rules_list
  tags                                            = var.tags
}

模块本身有一堆动态块，以适应各种配置，如下所示：

    resource "azurerm_cdn_frontdoor_firewall_policy" "cdn_frontdoor_firewall_policy" {
  name                              = var.cdn_frontdoor_firewall_policy_name
  resource_group_name               = var.resource_group_name
  sku_name                          = var.sku_name
  enabled                           = var.enabled
  mode                              = var.mode
  custom_block_response_status_code = var.custom_block_response_status_code
  custom_block_response_body        = var.custom_block_response_body
  request_body_check_enabled        = var.request_body_check_enabled
  tags                              = var.tags
  dynamic "managed_rule" {
    for_each = toset(var.managed_rules_list)
    content {
      type    = managed_rule.value["type"]
      version = managed_rule.value["version"]
      action  = managed_rule.value["action"]
      dynamic "exclusion" {
        for_each = toset(var.managed_rules_exclusion_list)
        content {
          match_variable = exclusion.value["match_variable"]
          operator       = exclusion.value["operator"]
          selector       = exclusion.value["selector"]
        }
      }
      dynamic "override" {
        for_each = toset(var.managed_rules_overide_list)
        content {
          rule_group_name = override.value["rule_group_name"]
          dynamic "rule" {
            for_each = toset(var.managed_rules_overide_rule_list)
            content {
              rule_id = rule.value["rule_id"]
              action  = rule.value["action"]
              dynamic "exclusion" {
                for_each = toset(var.managed_rules_overide_rule_exclusion_list)
                content {
                  match_variable = exclusion.value["match_variable"]
                  operator       = exclusion.value["operator"]
                  selector       = exclusion.value["selector"]
                }
              }
            }
          }
          dynamic "exclusion" {
            for_each = toset(var.managed_rules_overide_rule_group_exclusion_list)
            content {
              match_variable = exclusion.value["match_variable"]
              operator       = exclusion.value["operator"]
              selector       = exclusion.value["selector"]
            }
          }
        }
      }
    }
  }
  dynamic "custom_rule" {
    for_each = toset(var.custom_rules_list)
    content {
      name                           = custom_rule.value["name"]
      enabled                        = custom_rule.value["enabled"]
      priority                       = custom_rule.value["priority"]
      type                           = custom_rule.value["type"]
      action                         = custom_rule.value["action"]
      rate_limit_duration_in_minutes = custom_rule.value["rate_limit_duration_in_minutes"]
      rate_limit_threshold           = custom_rule.value["rate_limit_threshold"]
      match_condition {
        match_variable     = custom_rule.value["match_variable"]
        operator           = custom_rule.value["operator"]
        negation_condition = custom_rule.value["negation_condition"]
        match_values       = custom_rule.value["match_values"]
      }
    }
  }
}

我的问题是，当我运行这个时 - 我收到以下错误：

“each.value.managed_rules_list 是一个包含 1 个元素的元组，此值没有任何属性。”

根据我的阅读，我认为这是因为我需要在 Terraform 中的 firewall_policy 元素上使用 flatten 命令才能将其传递给模块：

就像这里

然而 - 尽管阅读了上述内容，我仍不确定我需要如何调用 flatten 来解释所有嵌套对象，然后如何将它们传递给我的模块，因为我以前没有使用过它。