如何獲取應用服務環境 ID 以在 terraform 的應用服務計划中使用

Question

有人可以幫助使用 ARM 模板部署應用服務環境。

 data "azurerm_resource_group" "rg" { name = "${var.rg_name}" } resource "azurerm_template_deployment" "deploy" { name = "${var.deployment_name}" resource_group_name = "${data.azurerm_resource_group.rg.name}" template_body = <<DEPLOY { "$schema": "http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", "contentVersion": "1.0.0.0", "parameters": { "aseName": { "type": "string" }, "subscriptionId": { "type": "string" }, "location": { "type": "string" }, "vnetName": { "type": "string" }, "subnetName": { "type": "string" }, "vnetId": { "type": "string" }, "VNetResourceGroupName": { "type": "string" }, "vnetAddress": { "type": "string" }, "subnetAddress": { "type": "string" }, "subnetRouteTableName": { "type": "string" }, "subnetNSGName": { "type": "string" }, "ilbMode": { "type": "int" }, "subnetId": { "type": "string" } }, "resources": [ { "apiVersion": "2017-05-10", "name": "existingVnetTemplate", "type": "Microsoft.Resources/deployments", "resourceGroup": "[parameters('VNetResourceGroupName')]", "subscriptionId": "[parameters('subscriptionId')]", "properties": { "mode": "Incremental", "template": { "$schema": "http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", "contentVersion": "1.0.0.0", "parameters": {}, "variables": {}, "resources": [ { "apiVersion": "2016-06-01", "type": "Microsoft.Network/virtualNetworks/subnets", "name": "[concat(parameters('vnetName'), '/', parameters('subnetName'))]", "properties": { "addressPrefix": "[parameters('subnetAddress')]", "networkSecurityGroup": { "id": "[resourceId('Microsoft.Network/networkSecurityGroups', parameters('subnetNSGName'))]" }, "routeTable": { "id": "[resourceId('Microsoft.Network/routeTables', parameters('subnetRouteTableName'))]" } } } ] }, "parameters": {} }, "dependsOn": [ "[resourceId('Microsoft.Network/networkSecurityGroups/', parameters('subnetNSGName'))]", "[resourceId('Microsoft.Network/routeTables/', parameters('subnetRouteTableName'))]" ] }, { "apiVersion": "2019-02-01", "type": "Microsoft.Web/hostingEnvironments", "name": "[parameters('aseName')]", "kind": "ASEV2", "location": "[parameters('location')]", "properties": { "name": "[parameters('aseName')]", "location": "[parameters('location')]", "InternalLoadBalancingMode": "[parameters('ilbMode')]", "virtualNetwork": { "Id": "[parameters('subnetId')]" } }, "tags": {}, "dependsOn": [ "['existingVnetTemplate']" ] }, { "apiVersion": "2015-06-15", "type": "Microsoft.Network/routeTables", "name": "[parameters('subnetRouteTableName')]", "location": "[parameters('location')]", "tags": { "displayName": "UDR - Subnet" }, "properties": { "routes": [ { "name": "abdc-route", "properties": { "addressPrefix": "0.0.0.0/0", "nextHopType": "Internet" } } ] } }, { "apiVersion": "2017-06-01", "type": "Microsoft.Network/networkSecurityGroups", "name": "[parameters('subnetNSGName')]", "location": "[parameters('location')]", "tags": { "displayName": "NSG - Subnet" }, "properties": { "securityRules": [ { "name": "Inbound-management", "properties": { "description": "Used to manage ASE from public VIP", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "454-455", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 100, "direction": "Inbound" } }, { "name": "Inbound-load-balancer-keep-alive", "properties": { "description": "Allow communication to ASE from Load Balancer", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "16001", "sourceAddressPrefix": "AzureLoadBalancer", "destinationAddressPrefix": "*", "access": "Allow", "priority": 105, "direction": "Inbound" } }, { "name": "ASE-internal-inbound", "properties": { "description": "ASE-internal-inbound", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "*", "sourceAddressPrefix": "[parameters('subnetAddress')]", "destinationAddressPrefix": "*", "access": "Allow", "priority": 110, "direction": "Inbound" } }, { "name": "Inbound-HTTP", "properties": { "description": "Allow HTTP", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "80", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 120, "direction": "Inbound" } }, { "name": "Inbound-HTTPS", "properties": { "description": "Allow HTTPS", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "443", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 130, "direction": "Inbound" } }, { "name": "Inbound-FTP", "properties": { "description": "Allow FTP over port 21", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "21", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 140, "direction": "Inbound" } }, { "name": "Inbound-FTPS", "properties": { "description": "Allow FTPS", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "990", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 150, "direction": "Inbound" } }, { "name": "Inbound-FTP-Data", "properties": { "description": "RDP", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "10001-10020", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 160, "direction": "Inbound" } }, { "name": "Inbound-Remote-Debugging", "properties": { "description": "Visual Studio remote debugging", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "4016-4022", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 170, "direction": "Inbound" } }, { "name": "Outbound-443", "properties": { "description": "Azure Storage blob", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "443", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 100, "direction": "Outbound" } }, { "name": "Outbound-DB", "properties": { "description": "Database", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "1433", "sourceAddressPrefix": "*", "destinationAddressPrefix": "Sql", "access": "Allow", "priority": 110, "direction": "Outbound" } }, { "name": "Outbound-DNS", "properties": { "description": "DNS", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "53", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 120, "direction": "Outbound" } }, { "name": "ASE-internal-outbound", "properties": { "description": "Azure Storage queue", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "*", "sourceAddressPrefix": "*", "destinationAddressPrefix": "[parameters('subnetAddress')]", "access": "Allow", "priority": 130, "direction": "Outbound" } }, { "name": "Outbound-80", "properties": { "description": "Outbound 80", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "80", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 140, "direction": "Outbound" } }, { "name": "ASE-to-VNET", "properties": { "description": "ASE to VNET", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "*", "sourceAddressPrefix": "*", "destinationAddressPrefix": "[parameters('vnetAddress')]", "access": "Allow", "priority": 150, "direction": "Outbound" } }, { "name": "Outbound-NTP", "properties": { "description": "Clock", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "123", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 160, "direction": "Outbound" } } ] } } ] } DEPLOY parameters = { "location" = "${var.location}" "aseName" = "${var.aseName}" "subscriptionId" = "${var.subscriptionId}" "vnetName" = "${var.vnetName}" "subnetName" = "${var.subnetName}" "vnetId" = "${var.vnetId}" "VNetResourceGroupName" = "${var.VNetResourceGroupName}" "vnetAddress" = "${var.vnetAddress}" "subnetAddress" = "${var.subnetAddress}" "subnetRouteTableName" = "${var.subnetRouteTableName}" "subnetNSGName" = "${var.subnetNSGName}" "ilbMode" = "3" "subnetId" = "${var.subnetId}" } deployment_mode = "Incremental" } "outputs": { "app_service_evironment_id": { "type": "string", "value": "[resourceId('Microsoft.Web/hostingEnvironments', parameters('aseName'))]", } }

我如何在此模板中獲取應用服務環境（Hostingenvironment）的 ID，以便我能夠以 terraform 輸出它並在應用服務計划參數（app_service_environment_id）中使用它。 這是在私有網絡中部署應用服務。

https://www.terraform.io/docs/providers/azurerm/r/app_service_plan.html#app_service_environment_id

我嘗試從 azure 門戶部署應用服務環境，並以“/subscription/xxxx-xxx-xx-xxxx-xxx/Microsoft.web/Hostingenvironment/”格式提及其 ID，返回 404。

例如：app_service_environment_id = "/subscription/xxxx-xxx-xx-xxxx-xxx/Microsoft.web/Hostingenvironment/xxxxxxx"

任何幫助

Answer 1

應用服務環境的resource group包括resource group 。

/subscriptions/xxxx-xxx-xx-xxxx-xxx/resourceGroups/xxxxx/providers/Microsoft.Web/hostingEnvironments/xxxx

如果您想將 ARM 模板與您的 terraform 文件相結合，可能已經有一個答案： ARM Return App Service Environment ID to use in Terraform Script

 "outputs": { "app_service_evironment_id": { "type": "string", "value": "[resourceId('Microsoft.Web/hostingEnvironments', parameters('ilbase_name'))]" } } ... azurerm_app_service_plan.test.app_service_environment_id = azurerm_template_deployment.ase.outputs["app_service_evironment_id"]

Answer 2

您犯的錯誤是您需要將輸出放在模板代碼中，而不是 Terraform 代碼中。 所以你的 Terraform 代碼應該是這樣的：

 data "azurerm_resource_group" "rg" { name = "${var.rg_name}" } resource "azurerm_template_deployment" "deploy" { name = "${var.deployment_name}" resource_group_name = "${data.azurerm_resource_group.rg.name}" template_body = <<DEPLOY { "$schema": "http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", "contentVersion": "1.0.0.0", "parameters": { "aseName": { "type": "string" }, "subscriptionId": { "type": "string" }, "location": { "type": "string" }, "vnetName": { "type": "string" }, "subnetName": { "type": "string" }, "vnetId": { "type": "string" }, "VNetResourceGroupName": { "type": "string" }, "vnetAddress": { "type": "string" }, "subnetAddress": { "type": "string" }, "subnetRouteTableName": { "type": "string" }, "subnetNSGName": { "type": "string" }, "ilbMode": { "type": "int" }, "subnetId": { "type": "string" } }, "resources": [ { "apiVersion": "2017-05-10", "name": "existingVnetTemplate", "type": "Microsoft.Resources/deployments", "resourceGroup": "[parameters('VNetResourceGroupName')]", "subscriptionId": "[parameters('subscriptionId')]", "properties": { "mode": "Incremental", "template": { "$schema": "http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", "contentVersion": "1.0.0.0", "parameters": {}, "variables": {}, "resources": [ { "apiVersion": "2016-06-01", "type": "Microsoft.Network/virtualNetworks/subnets", "name": "[concat(parameters('vnetName'), '/', parameters('subnetName'))]", "properties": { "addressPrefix": "[parameters('subnetAddress')]", "networkSecurityGroup": { "id": "[resourceId('Microsoft.Network/networkSecurityGroups', parameters('subnetNSGName'))]" }, "routeTable": { "id": "[resourceId('Microsoft.Network/routeTables', parameters('subnetRouteTableName'))]" } } } ] }, "parameters": {} }, "dependsOn": [ "[resourceId('Microsoft.Network/networkSecurityGroups/', parameters('subnetNSGName'))]", "[resourceId('Microsoft.Network/routeTables/', parameters('subnetRouteTableName'))]" ] }, { "apiVersion": "2019-02-01", "type": "Microsoft.Web/hostingEnvironments", "name": "[parameters('aseName')]", "kind": "ASEV2", "location": "[parameters('location')]", "properties": { "name": "[parameters('aseName')]", "location": "[parameters('location')]", "InternalLoadBalancingMode": "[parameters('ilbMode')]", "virtualNetwork": { "Id": "[parameters('subnetId')]" } }, "tags": {}, "dependsOn": [ "['existingVnetTemplate']" ] }, { "apiVersion": "2015-06-15", "type": "Microsoft.Network/routeTables", "name": "[parameters('subnetRouteTableName')]", "location": "[parameters('location')]", "tags": { "displayName": "UDR - Subnet" }, "properties": { "routes": [ { "name": "abdc-route", "properties": { "addressPrefix": "0.0.0.0/0", "nextHopType": "Internet" } } ] } }, { "apiVersion": "2017-06-01", "type": "Microsoft.Network/networkSecurityGroups", "name": "[parameters('subnetNSGName')]", "location": "[parameters('location')]", "tags": { "displayName": "NSG - Subnet" }, "properties": { "securityRules": [ { "name": "Inbound-management", "properties": { "description": "Used to manage ASE from public VIP", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "454-455", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 100, "direction": "Inbound" } }, { "name": "Inbound-load-balancer-keep-alive", "properties": { "description": "Allow communication to ASE from Load Balancer", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "16001", "sourceAddressPrefix": "AzureLoadBalancer", "destinationAddressPrefix": "*", "access": "Allow", "priority": 105, "direction": "Inbound" } }, { "name": "ASE-internal-inbound", "properties": { "description": "ASE-internal-inbound", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "*", "sourceAddressPrefix": "[parameters('subnetAddress')]", "destinationAddressPrefix": "*", "access": "Allow", "priority": 110, "direction": "Inbound" } }, { "name": "Inbound-HTTP", "properties": { "description": "Allow HTTP", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "80", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 120, "direction": "Inbound" } }, { "name": "Inbound-HTTPS", "properties": { "description": "Allow HTTPS", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "443", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 130, "direction": "Inbound" } }, { "name": "Inbound-FTP", "properties": { "description": "Allow FTP over port 21", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "21", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 140, "direction": "Inbound" } }, { "name": "Inbound-FTPS", "properties": { "description": "Allow FTPS", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "990", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 150, "direction": "Inbound" } }, { "name": "Inbound-FTP-Data", "properties": { "description": "RDP", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "10001-10020", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 160, "direction": "Inbound" } }, { "name": "Inbound-Remote-Debugging", "properties": { "description": "Visual Studio remote debugging", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "4016-4022", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 170, "direction": "Inbound" } }, { "name": "Outbound-443", "properties": { "description": "Azure Storage blob", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "443", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 100, "direction": "Outbound" } }, { "name": "Outbound-DB", "properties": { "description": "Database", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "1433", "sourceAddressPrefix": "*", "destinationAddressPrefix": "Sql", "access": "Allow", "priority": 110, "direction": "Outbound" } }, { "name": "Outbound-DNS", "properties": { "description": "DNS", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "53", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 120, "direction": "Outbound" } }, { "name": "ASE-internal-outbound", "properties": { "description": "Azure Storage queue", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "*", "sourceAddressPrefix": "*", "destinationAddressPrefix": "[parameters('subnetAddress')]", "access": "Allow", "priority": 130, "direction": "Outbound" } }, { "name": "Outbound-80", "properties": { "description": "Outbound 80", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "80", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 140, "direction": "Outbound" } }, { "name": "ASE-to-VNET", "properties": { "description": "ASE to VNET", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "*", "sourceAddressPrefix": "*", "destinationAddressPrefix": "[parameters('vnetAddress')]", "access": "Allow", "priority": 150, "direction": "Outbound" } }, { "name": "Outbound-NTP", "properties": { "description": "Clock", "protocol": "*", "sourcePortRange": "*", "destinationPortRange": "123", "sourceAddressPrefix": "*", "destinationAddressPrefix": "*", "access": "Allow", "priority": 160, "direction": "Outbound" } } ] } } ], "outputs": { "app_service_evironment_id": { "type": "string", "value": "[resourceId('Microsoft.Web/hostingEnvironments', parameters('aseName'))]" } } } DEPLOY parameters = { "location" = "${var.location}" "aseName" = "${var.aseName}" "subscriptionId" = "${var.subscriptionId}" "vnetName" = "${var.vnetName}" "subnetName" = "${var.subnetName}" "vnetId" = "${var.vnetId}" "VNetResourceGroupName" = "${var.VNetResourceGroupName}" "vnetAddress" = "${var.vnetAddress}" "subnetAddress" = "${var.subnetAddress}" "subnetRouteTableName" = "${var.subnetRouteTableName}" "subnetNSGName" = "${var.subnetNSGName}" "ilbMode" = "3" "subnetId" = "${var.subnetId}" } deployment_mode = "Incremental" } outputs "app_service_evironment_id" { value = "${azurerm_template_deployment.outputs["app_service_evironment_id"]}" }

或者 Terraform 的輸出也可以是這樣的格式：

outputs "app_service_evironment_id" {
        value = "${lookup(azurerm_template_deployment.app_service_evironment_id.outputs, "app_service_evironment_id")}"
    }

Terraform 的輸出僅向您展示如何在模板部署中使用輸出。 所以你也可以像這樣在服務計划中引用它：

resource "azurerm_app_service_plan" "example" {
  ...
  app_service_environment_id = "${lookup(azurerm_template_deployment.app_service_evironment_id.outputs, "app_service_evironment_id")}"
  ...
}