TerraformAzure容器组似乎无法挂载多个卷?
在查看 Azure 容器组的文档时,特别是有关机密的此页面:https : //docs.microsoft.com/en-us/azure/container-instances/container-instances-volume-secret
我注意到卷对象是一个数组似乎是 1 卷或更多卷。
"volumes": [
{
"name": "secretvolume1",
"secret": {
"mysecret1": "TXkgZmlyc3Qgc2VjcmV0IEZPTwo=",
"mysecret2": "TXkgc2Vjb25kIHNlY3JldCBCQVIK"
}
}
]
在此处查看 Terraform 文档时:https : //registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/container_group
我注意到卷对象是单一的。
不能在 terraform 中制作多个卷吗?尽管在文档中似乎如此,但在 ARM 中这也是不可能的吗?测试表明 Terraform 不支持多卷,尽管我对 ARM 的验证不够熟练。
回答
当然,可以使用 Terraform 创建多个卷:
在我的工作示例中,它创建了两个卷,一个用于存储文件共享,另一个用于秘密卷。
resource "azurerm_resource_group" "example" {
name = "${var.prefix}-resources"
location = var.location
}
resource "azurerm_storage_account" "example" {
name = "${var.prefix}stor"
resource_group_name = azurerm_resource_group.example.name
location = azurerm_resource_group.example.location
account_tier = "Standard"
account_replication_type = "LRS"
}
resource "azurerm_storage_share" "example" {
name = "aci-test-share"
storage_account_name = azurerm_storage_account.example.name
quota = 50
}
resource "azurerm_container_group" "example" {
name = "${var.prefix}-continst"
location = azurerm_resource_group.example.location
resource_group_name = azurerm_resource_group.example.name
ip_address_type = "public"
dns_name_label = "${var.prefix}-continst"
os_type = "Linux"
container {
name = "hello-world"
image = "microsoft/aci-helloworld:latest"
cpu = "0.5"
memory = "1.5"
ports {
port = 443
protocol = "TCP"
}
volume {
name = "logs"
mount_path = "/aci/logs"
read_only = false
share_name = azurerm_storage_share.example.name
storage_account_name = azurerm_storage_account.example.name
storage_account_key = azurerm_storage_account.example.primary_access_key
}
volume {
name = "secretvolume1"
mount_path = "/mnt/secrets"
read_only = false
secret = {
"mysecret1"=base64encode("My first secret FOO")
"mysecret2"=base64encode("My second secret BAR")
}
}
}
}
我正在使用最新的提供商。
PS D:Terraform> .terraform.exe -v
Terraform v0.14.7
+ provider registry.terraform.io/hashicorp/azurerm v2.48.0
/bin/sh在 Azure 门户上验证容器实例的装载路径--->connect---> 。