![](/img/trans.png)
[英]Do two AWS accounts created in the same region share the same VPC?
[英]Terrraform: create aws vpc in different regions based on region input variable
我正在尝试使用 terraform aws vpc 模块创建一个 aws vpc - 它应该根据输入变量在不同的区域创建。
这是我在main.tf文件中得到的:
provider "aws" {
region = var.region
}
module "vpc" {
source = "terraform-aws-modules/vpc/aws"
name = local.workspace["vpc_name"]
cidr = local.workspace["vpc_cidr"]
azs = local.workspace["vpc_azs"]
private_subnets = local.workspace["vpc_private_subnets"]
public_subnets = local.workspace["vpc_public_subnets"]```
这是我在variables.tf中的内容:
variable "region" {}
...
locals {
env = {
default = {}
...
app-dev = {
env_name = "dev"
vpc_name = "app-vpc-dev"
vpc_cidr = "10.12.0.0/16"
vpc_azs = ["us-west-2a", "us-west-2b"]
vpc_private_subnets = ["10.12.60.0/24", "10.12.61.0/24"]
vpc_public_subnets = ["10.12.160.0/24", "10.12.161.0/24"]
}
}
environmentvars = contains(keys(local.env), terraform.workspace) ? terraform.workspace : "default"
workspace = merge(local.env["default"], local.env[local.environmentvars])
}
然后我想用不同的变量来应用它,比如:
terraform apply -var="region=us-west-2"
要么
terraform apply -var="region=eu-west-2"
它应该在不同的区域创建 vpc。 所以变量中的“us-west-2a”、“us-west-2b”应该替换为“eu-west-2a”、“eu-west-2b”。 这可能吗?
我试图这样做:
data "aws_availability_zones" "available" {
state = "available"
}
vpc_azs = "${data.aws_availability_zones.available.names}"
但它不起作用 - 它在一个区域添加资源,当添加到另一个区域时,尝试替换路由表而不是创建新路由表。
Plan: 24 to add, 0 to change, 4 to destroy.
# module.vpc.aws_route_table_association.private[0] must be replaced
-/+ resource "aws_route_table_association" "private" {
~ id = "rtbassoc-035aef7e37dad1ac1" -> (known after apply)
~ route_table_id = "rtb-026bfeee8c7e042a6" -> (known after apply)
~ subnet_id = "subnet-070f46911b6ac5d20" -> (known after apply) # forces replacement
}
# module.vpc.aws_route_table_association.private[1] must be replaced
-/+ resource "aws_route_table_association" "private" {
~ id = "rtbassoc-079f04e405eca2ed3" -> (known after apply)
~ route_table_id = "rtb-0aabe71401689c1be" -> (known after apply)
~ subnet_id = "subnet-03fe27c23fd3178f3" -> (known after apply) # forces replacement
}
# module.vpc.aws_route_table_association.public[0] must be replaced
-/+ resource "aws_route_table_association" "public" {
~ id = "rtbassoc-02af1c10bea83bdd2" -> (known after apply)
~ route_table_id = "rtb-000cfffca8956073c" -> (known after apply)
~ subnet_id = "subnet-0951342807d06a0f3" -> (known after apply) # forces replacement
}
# module.vpc.aws_route_table_association.public[1] must be replaced
-/+ resource "aws_route_table_association" "public" {
~ id = "rtbassoc-051ff11315ef42d31" -> (known after apply)
~ route_table_id = "rtb-000cfffca8956073c" -> (known after apply)
~ subnet_id = "subnet-0da8a20c3f25fcc44" -> (known after apply) # forces replacement
}
那么也许这可以通过其他方式完成?
没有意识到我需要不同区域的不同工作区来保存 state,关闭。
app-dev-us = {
env_name = "dev"
vpc_name = "app-vpc-dev"
vpc_cidr = "10.12.0.0/16"
vpc_azs = ["us-west-2a", "us-west-2b"]
vpc_private_subnets = ["10.12.60.0/24", "10.12.61.0/24"]
vpc_public_subnets = ["10.12.160.0/24", "10.12.161.0/24"]
}
app-dev-eu = {
env_name = "dev"
vpc_name = "app-vpc-dev"
vpc_cidr = "10.13.0.0/16"
vpc_azs = ["eu-central-1a", "eu-central-1b"]
vpc_private_subnets = ["10.13.60.0/24", "10.13.61.0/24"]
vpc_public_subnets = ["10.13.160.0/24", "10.13.161.0/24"]
}
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.