使用Azure的Terraform-如何创建存储帐户？

Question

在与Terraform战斗了一天之后，我在这里寻求帮助。

Terraform v0.11.11
+ provider.azurerm v1.20.0

我正在尝试从头开始创建一个新的资源组和一个存储帐户。 看起来可以在没有存储帐户的情况下创建资源组：

resource "azurerm_resource_group" "rg1" {
  name     = "myResourceGroup"
  location = "West Europe"
}

资源组已创建，并且当前没有存储帐户。 所以在这一点上我很高兴。 我执行销毁 ，然后从头开始。

现在，在代码中，在创建资源组之后，我想创建一个存储帐户，因为以后其他资源将需要引用它。 Azurerm_storage_account唯一需要的引用是对资源组的引用。

有关azurerm_storage_account的信息https://www.terraform.io/docs/providers/azurerm/d/storage_account.html

现在的代码如下所示：

resource "azurerm_resource_group" "rg1" {
  name     = "myResourceGroup"
  location = "West Europe"
}

data "azurerm_storage_account" "stacc1" {
  name                     = "mystorageaccount"
  resource_group_name      = "${azurerm_resource_group.rg1.name}"
}

我运行plan命令并获得以下输出：

$ terraform plan
Refreshing Terraform state in-memory prior to plan...
The refreshed state will be used to calculate this plan, but will not be
persisted to local or remote state storage.


------------------------------------------------------------------------

An execution plan has been generated and is shown below.
Resource actions are indicated with the following symbols:
  + create
 <= read (data resources)

Terraform will perform the following actions:

 <= data.azurerm_storage_account.stacc1
      id:                               <computed>
      access_tier:                      <computed>
      account_encryption_source:        <computed>
      account_kind:                     <computed>
      account_replication_type:         <computed>
      account_tier:                     <computed>
      custom_domain.#:                  <computed>
      enable_blob_encryption:           <computed>
      enable_file_encryption:           <computed>
      enable_https_traffic_only:        <computed>
      location:                         <computed>
      name:                             "mystorageaccount"
      primary_access_key:               <computed>
      primary_blob_connection_string:   <computed>
      primary_blob_endpoint:            <computed>
      primary_connection_string:        <computed>
      primary_file_endpoint:            <computed>
      primary_location:                 <computed>
      primary_queue_endpoint:           <computed>
      primary_table_endpoint:           <computed>
      resource_group_name:              "myResourceGroup"
      secondary_access_key:             <computed>
      secondary_blob_connection_string: <computed>
      secondary_blob_endpoint:          <computed>
      secondary_connection_string:      <computed>
      secondary_location:               <computed>
      secondary_queue_endpoint:         <computed>
      secondary_table_endpoint:         <computed>
      tags.%:                           <computed>

  + azurerm_resource_group.rg1
      id:                               <computed>
      location:                         "westeurope"
      name:                             "myResourceGroup"
      tags.%:                           <computed>


Plan: 1 to add, 0 to change, 0 to destroy.

它说它将寻找（不创建）资源data.azurerm_storage_account.stacc1 ，显然，运行apply命令将失败，并显示以下消息：

错误：应用方案时出错：

发生1个错误：

• data.azurerm_storage_account.stacc1：data.azurerm_storage_account.stacc1：错误：找不到存储帐户“ mystorageaccount”（资源组“ myResourceGroup”）

因为它找不到所提到的存储帐户。

所有这些都引发了我的问题：“如何在Azure中使用Terraform创建存储帐户？”

Answer 1

您需要使用资源，而不是数据实体。 所有资源都是如此。 数据实体是获取资源数据，而不是创建它们。

resource "azurerm_resource_group" "testrg" {
  name     = "resourceGroupName"
  location = "westus"
}    

resource "azurerm_storage_account" "testsa" {
  name                     = "storageaccountname"
  resource_group_name      = "${azurerm_resource_group.testrg.name}"
  location                 = "westus"
  account_tier             = "Standard"
  account_replication_type = "GRS"

  tags {
    environment = "staging"
  }
}

https://www.terraform.io/docs/providers/azurerm/r/storage_account.html