无法访问 terraform 中对象列表的属性

Question

尝试基于对象列表创建动态块。

这是尝试

data "vault_policy_document" "this" {

  dynamic "rule" {
    for_each = {
      for p in var.policy : format("%s-%s", p.path, join(",", p.capabilities)) => p
    }

    content {
      path         = rule.value.path
      capabilities = rule.value.capabilities
    }
  }
}

这是输入var.policy

policy-test-1 = [
  {
      capabilities = [
          "create",
          "read",
      ]
      path         = "/foo/lala"
  },
  {
      capabilities = [
          "create",
          "read",
      ]
      path         = "/bar/lala"
  },
]

其声明

variable "policy" {
  description = "The policy to be created"
  type = map(list(object({
    path = string
    capabilities = set(string)
  })))

为什么这会失败

5:       for p in var.policy : format("%s-%s", p.path, join(",", p.capabilities)) => p
│
│ Can't access attributes on a list of objects.

列表中的每个项目（即for循环中的p ）不是具有paths和capabilities属性的 object 吗？

Answer 1

你需要双 for 循环，因为你有一个 map 列表，以及merge以展平它：

    for_each = merge([
             for p in var.policy: {
                for statement in p: 
                   format("%s-%s", statement.path, join(",", statement.capabilities)) => statement
             }   
         ]...)