我的 Azure App Gateway 模块遇到问题。我已将所有内容都转换为动态块，当我使用 1 个应用程序的输入调用我的模块时，它运行得非常好。
1 个应用程序：
module "my_appgw" {
source = "../../../modules/module-application-gateway"
location = var.location
resource_group_name = var.rsg
subnet_id = "${data.azurerm_virtual_network.vnet_dmz.id}/subnets/waf"
app = [
{
name = "app1-example.com"
pick_host_name_from_backend = true,
},
]
}
但是，当我将第二个应用程序添加到我的通话中时，这就是我看到问题的时候。
2 个应用程序
module "my_appgw" {
source = "../../../modules/module-application-gateway"
location = var.location
resource_group_name = var.rsg
subnet_id = "${data.azurerm_virtual_network.vnet_dmz.id}/subnets/waf"
app = [
{
name = "app1-example.com"
pick_host_name_from_backend = true,
},
{
name = "app2-example.com"
}
]
}
添加新应用时，它同时具有 80 重定向和 443 规则。然而，由于索引，terraform 想要覆盖我的第一个应用程序规则，以便 80 条重定向规则在列表中排名第一和第二，然后是 443 规则在列表中排名第三和第四。我们可以在一个动态块中做多个内容块吗？正如您所看到的，当我将第二个应用程序添加到模块时，第一个应用程序正在发生变化，导致键不匹配（即 app1 id 与 app2 键不匹配等）。我的 http_listener 也发生了同样的事情
输出变化
request_routing_rule {
backend_address_pool_id = "<output omitted>/backendAddressPools/app1-example.com"
backend_address_pool_name = "app1-example.com"
backend_http_settings_id = "<output omitted>/backendHttpSettingsCollection/app1-example.com-https-settings"
backend_http_settings_name = "app1-example.com-https-settings"
http_listener_id = "<output omitted>/httpListeners/app1-example.com-443-https-list"
http_listener_name = "app1-example.com-443-https-list"
id = "<output omitted>/requestRoutingRules/app1-example.com-443"
name = "app1-example.com-443"
rule_type = "Basic"
}
~ request_routing_rule {
+ backend_address_pool_name = "app2-example.com"
+ backend_http_settings_name = "app2-example.com-https-settings"
http_listener_id = "<output omitted>/httpListeners/app1-example.com-http-list"
~ http_listener_name = "app1-example.com-http-list" -> "app2-example.com-443-https-list"
id = "<output omitted>/requestRoutingRules/app1-example.com-http-redirect"
~ name = "app1-example.com-http-redirect" -> "app2-example.com-443"
redirect_configuration_id = "<output omitted>/redirectConfigurations/app1-example.com-redirect"
- redirect_configuration_name = "app1-example.com-redirect" -> null
rule_type = "Basic"
}
+ request_routing_rule {
+ http_listener_name = "app1-example.com-http-list"
+ name = "app1-example.com-http-redirect"
+ redirect_configuration_name = "app1-example.com-redirect"
+ rule_type = "Basic"
}
+ request_routing_rule {
+ http_listener_name = "app2-example.com-http-list"
+ name = "app2-example.com-http-redirect"
+ redirect_configuration_name = "app2-example.com-redirect"
+ rule_type = "Basic"
}
建议的配置，不起作用
每个动态块多个内容块
for_each = [for i in var.app : {
name = i.name
}]
content {
name = "${http_listener.value.name}-${local.http_listener_name}"
frontend_ip_configuration_name = local.frontend_ip_configuration_name
frontend_port_name = 80
protocol = "Http"
}
content {
name = "${http_listener.value.name}-${http_listener.value.port}-${local.https_listener_name}"
frontend_ip_configuration_name = local.frontend_ip_configuration_name
frontend_port_name = http_listener.value.port
ssl_certificate_name = data.azurerm_key_vault_secret.cert_fe.name
protocol = "Https"
}
}
或动态块内的嵌套动态块，也不起作用
dynamic "http_listener" {
for_each = [for i in var.app : {
name = i.name
}]
content {
name = "${http_listener.value.name}-${local.http_listener_name}"
frontend_ip_configuration_name = local.frontend_ip_configuration_name
frontend_port_name = 80
protocol = "Http"
dynamic "http_listener" {
for_each = [for i in var.app : {
name = i.name
port = lookup(i, "frontend_port", 443)
}]
content {
name = "${http_listener.value.name}-${http_listener.value.port}-${local.https_listener_name}"
frontend_ip_configuration_name = local.frontend_ip_configuration_name
frontend_port_name = http_listener.value.port
ssl_certificate_name = data.azurerm_key_vault_secret.cert_fe.name
protocol = "Https"
}
}
}
有谁知道如何解决这个问题？如果现有应用程序将更改并且必须在每次添加新应用程序时被污染和重新创建，则使应用程序网关模块不可用。