Terraform with Azure - 如何创建存储帐户？

Question

在与 Terraform 战斗了一天后，我在这里呼救。

Terraform v0.11.11
+ provider.azurerm v1.20.0

我正在尝试从头开始创建一个新的资源组和一个存储帐户。看起来可以在没有存储帐户的情况下创建资源组：

resource "azurerm_resource_group" "rg1" {
  name     = "myResourceGroup"
  location = "West Europe"
}

资源组已创建，目前不存在存储帐户。所以在这一点上我很高兴。我执行destroy并从头开始。

现在，在代码中，创建资源组后，我想创建一个存储帐户，因为稍后其他资源需要引用它。azurerm_storage_account需要的唯一引用是对资源组的引用。

关于 azurerm_storage_account 的信息 https://www.terraform.io/docs/providers/azurerm/d/storage_account.html

代码现在看起来像这样：

resource "azurerm_resource_group" "rg1" {
  name     = "myResourceGroup"
  location = "West Europe"
}

data "azurerm_storage_account" "stacc1" {
  name                     = "mystorageaccount"
  resource_group_name      = "${azurerm_resource_group.rg1.name}"
}

我运行计划命令并获得以下输出：

$ terraform plan
Refreshing Terraform state in-memory prior to plan...
The refreshed state will be used to calculate this plan, but will not be
persisted to local or remote state storage.


------------------------------------------------------------------------

An execution plan has been generated and is shown below.
Resource actions are indicated with the following symbols:
  + create
 <= read (data resources)

Terraform will perform the following actions:

 <= data.azurerm_storage_account.stacc1
      id:                               <computed>
      access_tier:                      <computed>
      account_encryption_source:        <computed>
      account_kind:                     <computed>
      account_replication_type:         <computed>
      account_tier:                     <computed>
      custom_domain.#:                  <computed>
      enable_blob_encryption:           <computed>
      enable_file_encryption:           <computed>
      enable_https_traffic_only:        <computed>
      location:                         <computed>
      name:                             "mystorageaccount"
      primary_access_key:               <computed>
      primary_blob_connection_string:   <computed>
      primary_blob_endpoint:            <computed>
      primary_connection_string:        <computed>
      primary_file_endpoint:            <computed>
      primary_location:                 <computed>
      primary_queue_endpoint:           <computed>
      primary_table_endpoint:           <computed>
      resource_group_name:              "myResourceGroup"
      secondary_access_key:             <computed>
      secondary_blob_connection_string: <computed>
      secondary_blob_endpoint:          <computed>
      secondary_connection_string:      <computed>
      secondary_location:               <computed>
      secondary_queue_endpoint:         <computed>
      secondary_table_endpoint:         <computed>
      tags.%:                           <computed>

  + azurerm_resource_group.rg1
      id:                               <computed>
      location:                         "westeurope"
      name:                             "myResourceGroup"
      tags.%:                           <computed>


Plan: 1 to add, 0 to change, 0 to destroy.

它说它将寻找（不创建）资源data.azurerm_storage_account.stacc1，显然运行apply命令将失败并显示以下消息：

错误：应用计划时出错：

发生了 1 个错误：

• data.azurerm_storage_account.stacc1：data.azurerm_storage_account.stacc1：错误：未找到存储帐户“mystorageaccount”（资源组“myResourceGroup”）

因为它没有找到提到的存储帐户。

所有这些都引出了我的问题：“如何在 Azure 中使用 Terraform 创建存储帐户？”

Answer 1

您需要使用资源，而不是数据实体。所有资源都是如此。数据实体是获取资源数据，而不是创建它们。

resource "azurerm_resource_group" "testrg" {
  name     = "resourceGroupName"
  location = "westus"
}    

resource "azurerm_storage_account" "testsa" {
  name                     = "storageaccountname"
  resource_group_name      = "${azurerm_resource_group.testrg.name}"
  location                 = "westus"
  account_tier             = "Standard"
  account_replication_type = "GRS"

  tags {
    environment = "staging"
  }
}

https://www.terraform.io/docs/providers/azurerm/r/storage_account.html