Terraform terraform_remote_state部分配置 [英] Terraform terraform_remote_state Partial Configuration

问题描述

我的团队严重依赖Terraform内部的S3远程状态.初始化项目时，我们使用CLI的-backend-config功能指定S3配置，因此我们的实际Terraform代码如下所示:

My team relies heavily on S3 remote state from within Terraform. We use the -backend-config feature of the CLI to specify the S3 configuration when initializing projects, so our actual terraform code looks like:

terraform {
  backend "s3" {}
}

只要在CLI上使用-backend-config指定了所有S3属性，上述方法就可以很好地工作.

The above works great as long as all the S3 attributes are specified on the CLI with -backend-config.

我们想使用类似的策略在我们配置中的其他位置引用这些状态.由于后端的参数是动态的，并且是在CLI上指定的，因此我们希望做到这一点.

We would like to use a similar strategy for referencing these states elsewhere in our configurations. Since the parameters for the backend are dynamic and specified on the CLI, we are looking to do the same.

data "terraform_remote_state" "dns" {
  backend = "s3"
  config {
    key = "configurations/production/dns/terraform.tfstate"
  }
}

在上面的示例中，我们省略了必需的region和bucket参数，这当然会导致计划/应用失败(使用not a valid region:).

In the above example, we've omitted the required region and bucket parameters, which of course causes plan/apply to fail (with not a valid region:).

有没有一种方法可以用来从CLI指定远程状态引用的区域和存储区，而不是对其进行硬编码?

Is there a method by which we can specify the region and bucket for remote state references from the CLI instead of hard-coding them?

推荐答案

backend块非常特殊，因为它在Terraform的工作流程中得到了如此早期的处理，因此无法访问常规Terraform功能(例如变量) .这就是为什么它具有自己的特殊配置机制.

The backend block is rather special because it gets processed so early in Terraform's workflow, and thus it doesn't have access to normal Terraform features such as variables. That's why it has its own special mechanism for configuring it.

另一方面，terraform_remote_state数据源只是常规数据源，因此可以使用任何常规插值策略.例如，要通过CLI传递设置，您可以使用变量:

The terraform_remote_state data source, on the other hand, is just a regular data source and so any normal interpolation strategy can be used with it. To pass settings from the CLI, for example, you could use variables:

variable "dns_state_region" {
}

variable "dns_state_key" {
}

data "terraform_remote_state" "dns" {
  backend = "s3"
  config {
    region = "${var.dns_state_region}"
    key    = "${var.dns_state_key}"
  }
}

然后您可以将它们传递给terraform plan命令:

You can then pass these to the terraform plan command:

$ terraform plan \
    -var="dns_state_region=us-west-1" \
    -var="dns_state_key=configurations/production/dns/terraform.tfstate"

这篇关于Terraform terraform_remote_state部分配置的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！