Terraform：如何改變 VPC 子網

Question

我想在兩個子網路中配置 2 個網域控制器實例。 VPC、子網路和其他網路部分已建立。

主.tf

  resource "aws_instance" "PerformanceDC01" {
  count         = var.instance_count
  ami           = var.aws_ami
  ebs_optimized = true
  instance_type = var.aws_instance_type
  subnet_id     = var.pvtsub_a
  key_name      = var.aws_key_name
  vpc_security_group_ids = [
    var.base_sg,
    var.perfdc_sg
  ]
  root_block_device {
    volume_type = "gp2"
    volume_size = "80"
    encrypted   = true
    kms_key_id  = "10c07c9d-ede7-43d5-b633-75a2482848aa"
  }
  tags = {
    Name = "PerformanceDC0-${count.index + 1}"
  }
} 

變數.tf

variable "aws_region" {}
variable "aws_profile" {}
variable "instance_count" {}
variable "aws_vpc" {}
variable "pvtsub_a" {}
variable "pvtsub_b" {}
variable "pvtsub_c" {}
variable "pubsub_a" {}
variable "pubsub_b" {}
variable "pubsub_c" {}
variable "aws_ami" {}
variable "aws_instance_type" {}
variable "aws_key_name" {
  description = "Key Name"
  default     = "Performance_B_KP"
}
variable "base_sg" {}
variable "perfdc_sg" {}

性能.tfvars

.
.
instance_count    = "2"
.
.

問題： 我如何可變子網路號碼例如DC01是在pvtsub_a和DC02是在pvtsub_b？

Answer 1

使用for_each而不是count像這樣：

resource "aws_instance" "PerformanceDC" {
  for_each         = var.instances
  ami              = each.value.ami
  subnet_id        = each.value.subnet_id
  ...
  tags = {
    Name = "PerformanceDC0-${each.key + 1}"
  }
}

變數：

instances = [
  {
    ami       = "brad",
    subnet_id = "sg1",
  },
  {
    ami       = "pitt",
    subnet_id = "sg2",
  } 
]

這允許您將執行個體之一遷移到新的 AMI。