Bicep - 无法对嵌套资源执行请求的操作

Question

我在使用 .NET 集成创建 function 应用程序时，在二头肌文件中遇到了这个错误。 我的 .net 在另一个名为“tst-.net”的资源组中，与我的 function 应用程序分开。 有办法解决这个问题吗？ 这是代码片段：

   resource functionApp 'Microsoft.Web/sites@2022-03-01' = {
       name: functionAppName
       location: location
       tags: tags
       kind: 'functionapp'
       identity: {
         type: 'SystemAssigned'
       }
       properties: {
         httpsOnly: true
         serverFarmId: functionAppHostingPlan.id
         clientAffinityEnabled: true
         publicNetworkAccess: 'Disabled'
         siteConfig: {
           appSettings: [
             {
               name: 'AzureWebJobsStorage'
               value: 'DefaultEndpointsProtocol=https;AccountName=${functionAppStorageAccount.name};EndpointSuffix=${environment().suffixes.storage};AccountKey=${listKeys(functionAppStorageAccount.id, functionAppStorageAccount.apiVersion).keys[0].value}'
             }
             {
               name: 'FUNCTIONS_EXTENSION_VERSION'
               value: runtimeStackVersion
             }
             {
               name: 'FUNCTIONS_WORKER_RUNTIME'
               value: runtimeStack
             }
             {
               name: 'WEBSITE_CONTENTAZUREFILECONNECTIONSTRING'
               value: 'DefaultEndpointsProtocol=https;AccountName=${functionAppStorageAccount.name};EndpointSuffix=${environment().suffixes.storage};AccountKey=${listKeys(functionAppStorageAccount.id, functionAppStorageAccount.apiVersion).keys[0].value}'
             }
             {
               name: 'WEBSITE_CONTENTSHARE'
               value: 'functionapp'
             }
             {
               name: 'WEBSITE_VNET_ROUTE_ALL'
               value: '1'
             }
             {
               name: 'WEBSITE_DNS_SERVER'
               value: '168.63.129.16'
             }
             {
               name: 'WEBSITE_CONTENTOVERVNET'
               value: '1'
             }
           ]
           minTlsVersion: '1.2'
           linuxFxVersion: linuxFxVersion
           ftpsState: 'FtpsOnly'
         }
       }
     }

我创建了一个模块以使用资源组 scope 以引用“tst-.net”

module networkConfig 'modules/network-config.bicep' = {
   name: '${deploymentPrefix}-fn-networkcfg' 
   dependsOn: [
     functionApp
   ]
   scope: resourceGroup(pvtResourceGroupName)
   params: {
     functionAppName: functionAppName
     privateBackendSubnet: privateBackendSubnet
     privateEndpointVNet: privateEndpointVNet
     privateBackendSubnetCIDR: privateBackendSubnetCIDR
   }
 }

这是.network-config.bicep的内容

 resource networkConfig 'Microsoft.Web/sites/networkConfig@2022-03-01' = {
   name: '${functionAppName}/virtualNetwork'
   properties: {
     subnetResourceId: resourceId('Microsoft.Network/virtualNetworks/subnets', privateEndpointVNet, privateBackendSubnet)
     swiftSupported: true
   }
 }

资源组部署的完整错误

{ "status": "Failed", "error": { "code": "DeploymentFailed", "message": "至少有一个资源部署操作失败，详情请列出部署操作，详见https://aka。 ms/DeployOperations获取使用详情。”, “details”: [ { “code”: “NotFound”, “message”: “{\r\n “error”: {\r\n “code”: “ParentResourceNotFound”, \r\n “消息”：“无法对嵌套资源执行请求的操作。 找不到父资源 'ase-data-tst-edp-fn-001' 。"\r\n }\r\n}" } ]

Answer 1

声明模块时，可以为模块设置一个 scope，这不同于包含 Bicep 文件的 scope。 在你的场景中，因为你有现有的 virtual.network，它是不同的 scope，virtual.network 应该在单独的模块中声明。 供您参考，您可以使用以下模板部署与另一个资源组中的 virtual.network 集成的 function 应用程序。

main.bicep 文件

@description('Location for all resources except Application Insights.')
param location string = resourceGroup().location

@description('Location for Application Insights.')
param appInsightsLocation string

@description('The language worker runtime to load in the function app.')
@allowed([
  'node'
  'dotnet'
  'java'
])
param runtime string = 'node'

@description('The name of the function app that you wish to create.')
param appName string = 'fnapp${uniqueString(resourceGroup().id)}'

@description('Storage Account type')
@allowed([
  'Standard_LRS'
  'Standard_GRS'
  'Standard_RAGRS'
])
param storageAccountType string = 'Standard_LRS'

@description('The name of the virtual network to be linked.')
param vnetName string

@description('The name of the subnet to be created within the virtual network.')
param subnetName string

@description('The name of the resource group where existing virtual network exists.')
param vnresourceGroup string

var functionAppName = appName
var hostingPlanName = appName
var storageAccountName = '${uniqueString(resourceGroup().id)}azfunctions'
var functionWorkerRuntime = runtime

resource virtualNetwork 'Microsoft.Network/virtualNetworks@2020-06-01' existing = {
  name: vnetName
  scope: resourceGroup(vnresourceGroup)
}

resource storageAccount 'Microsoft.Storage/storageAccounts@2021-04-01' = {
  name: storageAccountName
  location: location
  sku: {
    name: storageAccountType
  }
  kind: 'StorageV2'
}

resource appInsights 'Microsoft.Insights/components@2020-02-02' = {
  name: functionAppName
  location: appInsightsLocation
  kind: 'web'
  properties: {
    Application_Type: 'web'
  }
}

resource serverFarm 'Microsoft.Web/serverfarms@2020-06-01' = {
  name: hostingPlanName
  location: location
  sku: {
    name: 'EP1'
    tier: 'ElasticPremium'
  }
  kind: 'elastic'
  properties: {
    maximumElasticWorkerCount: 20
  }
}

resource function 'Microsoft.Web/sites@2020-06-01' = {
  name: functionAppName
  location: location
  kind: 'functionapp'
  properties: {
    serverFarmId: serverFarm.id
    siteConfig: {
      appSettings: [
        {
          name: 'APPINSIGHTS_INSTRUMENTATIONKEY'
          value: appInsights.properties.InstrumentationKey
        }
        {
          name: 'APPLICATIONINSIGHTS_CONNECTION_STRING'
          value: 'InstrumentationKey=${appInsights.properties.InstrumentationKey}'
        }
        {
          name: 'AzureWebJobsStorage'
          value: 'DefaultEndpointsProtocol=https;AccountName=${storageAccount.name};EndpointSuffix= ${environment().suffixes.storage};AccountKey=${storageAccount.listKeys().keys[0].value}'
        }
        {
          name: 'WEBSITE_CONTENTAZUREFILECONNECTIONSTRING'
          value: 'DefaultEndpointsProtocol=https;AccountName=${storageAccountName};EndpointSuffix=${environment().suffixes.storage};AccountKey=${storageAccount.listKeys().keys[0].value};'
        }
        {
          name: 'FUNCTIONS_EXTENSION_VERSION'
          value: '~3'
        }
        {
          name: 'FUNCTIONS_WORKER_RUNTIME'
          value: functionWorkerRuntime
        }
        {
          name: 'WEBSITE_NODE_DEFAULT_VERSION'
          value: '~12'
        }
      ]
    }
  }
  dependsOn: [
    virtualNetwork
  ]
}

resource networkConfig 'Microsoft.Web/sites/networkConfig@2020-06-01' = {
  parent: function
  name: 'virtualNetwork'
  properties: {
    subnetResourceId: subnet.outputs.subnetId
    swiftSupported: true
  }
  dependsOn: [
    subnet
  ]
}

module subnet 'modules/subnet.bicep' = {
  name: subnetName
  scope: resourceGroup(vnresourceGroup)
  params: {
    subnetName: subnetName
    subnetPrefix: '10.2.1.0/24'
    vnetName: vnetName
  }
}

苏网二头肌

@description('The name of the virtual network to be linked.')
param vnetName string

@description('The name of the subnet to be created within the virtual network.')
param subnetName string

@description('The address Prefix of subnet to be created within the virtual network.')
param subnetPrefix string 

param deploySubnet bool = true

resource VNET 'Microsoft.Network/virtualNetworks@2021-02-01' existing  = {
  name: vnetName
  
}

resource Subnets 'Microsoft.Network/virtualNetworks/subnets@2020-11-01'= if (deploySubnet)   {
  name: subnetName
  parent: VNET
  properties: {
    addressPrefix: subnetPrefix
    privateEndpointNetworkPolicies: 'Disabled'
    privateLinkServiceNetworkPolicies: 'Enabled'
    delegations: [
      {
          name: 'Microsoft.Web.serverFarms'
          properties: {
              serviceName: 'Microsoft.Web/serverFarms'
          }
      }
  ]
  }
}

output subnetId string = deploySubnet ? Subnets.id:''