通过 for_each 循环创建的 Terragrunt 导入资源

Question

我正在使用 for_each 循环创建 GCP 存储桶，并希望将现有存储桶导入我的 terraform 状态

An execution plan has been generated and is shown below.
Resource actions are indicated with the following symbols:
  + create

Terraform will perform the following actions:

  # google_storage_bucket.buckets["a-test-test-test"] will be created
  + resource "google_storage_bucket" "buckets" {
      + bucket_policy_only          = (known after apply)
      + force_destroy               = false
      + id                          = (known after apply)
      + location                    = "US"
      + name                        = "a-test-test-test"
      + project                     = "xxx"
      + self_link                   = (known after apply)
      + storage_class               = "STANDARD"
      + uniform_bucket_level_access = false
      + url                         = (known after apply)

      + versioning {
          + enabled = true
        }
    }

Plan: 1 to add, 0 to change, 0 to destroy.

Changes to Outputs:
  ~ urls = [
      - "gs://a-test-test-test",
      + (known after apply),
    ]

Do you want to perform these actions?
  Terraform will perform the actions described above.
  Only 'yes' will be accepted to approve.

  Enter a value: yes

google_storage_bucket.buckets["a-test-test-test"]: Creating...

Error: googleapi: Error 409: You already own this bucket. Please select another name., conflict

资源已经存在但没关系，我可以导入它，问题是如何

因为这样运行它

MacBook-Pro% terragrunt import google_storage_bucket.buckets a-test-test-test
...
Acquiring state lock. This may take a few moments...
google_storage_bucket.buckets: Importing from ID "a-test-test-test"...
google_storage_bucket.buckets: Import prepared!
  Prepared google_storage_bucket for import
google_storage_bucket.buckets: Refreshing state... [id=a-test-test-test]

Import successful!

似乎有效，但它“错误地”导入了它

terragrunt state list
...
google_storage_bucket.buckets

它在我的 tfstate 中显示，但应该是这样的

google_storage_bucket.buckets["a-test-test-test"]

因为如果我现在运行 apply - 它说它想删除 google_storage_bucket.buckets 并创建 google_storage_bucket.buckets["a-test-test-test"]

google_storage_bucket.buckets: Refreshing state... [id=a-test-test-test]

An execution plan has been generated and is shown below.
Resource actions are indicated with the following symbols:
  + create
  - destroy

Terraform will perform the following actions:

  # google_storage_bucket.buckets will be destroyed
  - resource "google_storage_bucket" "buckets" {
      - bucket_policy_only          = false -> null
      - default_event_based_hold    = false -> null
      - force_destroy               = false -> null
      - id                          = "a-test-test-test" -> null
      - labels                      = {} -> null
      - location                    = "US" -> null
      - name                        = "a-test-test-test" -> null
      - project                     = "xxx" -> null
      - requester_pays              = false -> null
      - self_link                   = "https://www.googleapis.com/storage/v1/b/a-test-test-test" -> null
      - storage_class               = "STANDARD" -> null
      - uniform_bucket_level_access = false -> null
      - url                         = "gs://a-test-test-test" -> null

      - versioning {
          - enabled = true -> null
        }
    }

  # google_storage_bucket.buckets["a-test-test-test"] will be created
  + resource "google_storage_bucket" "buckets" {
      + bucket_policy_only          = (known after apply)
      + force_destroy               = false
      + id                          = (known after apply)
      + location                    = "US"
      + name                        = "a-test-test-test"
      + project                     = "xxx"
      + self_link                   = (known after apply)
      + storage_class               = "STANDARD"
      + uniform_bucket_level_access = false
      + url                         = (known after apply)

      + versioning {
          + enabled = true
        }
    }

Plan: 1 to add, 0 to change, 1 to destroy.

Changes to Outputs:
  + urls = [
      + (known after apply),
    ]

Do you want to perform these actions?
  Terraform will perform the actions described above.
  Only 'yes' will be accepted to approve.

任何想法如何在 terragrunt 中导入 for_each ？

我试过了

terragrunt import google_storage_bucket.buckets a-test-test-test
terragrunt import google_storage_bucket.buckets.a-test-test-test a-test-test-test
terragrunt import google_storage_bucket.buckets["a-test-test-test"] a-test-test-test
terragrunt import google_storage_bucket.buckets[\"a-test-test-test\"] a-test-test-test

没有人工作只是让我出错

zsh: no matches found: google_storage_bucket.buckets["a-test-test-test"]

虽然第一个选项 terragrunt import google_storage_bucket.buckets a-test-test-test 导入（又名工作）但不是正确的方式

---

terraform 代码是这样的：

inputs = {
  project_id  = "${local.project_id}"
    {
      name                        = "a-test-test-test"
      location                    = "US"
    }
}

locals {
  buckets        = {for b in jsondecode(var.buckets) : b.name => b }
}

variable "buckets" {
  description = "The name of the bucket."
}

resource "google_storage_bucket" "buckets" {
  for_each      = local.buckets
  name          = each.key
  project       = var.project_id
  location      = each.value.location

Answer 1

导入完整的实例地址（包括实例键索引部分）是正确的方法，但这里的技巧是确定解决 shell 语法的最佳方法，以便必要的字符可以到达 Terraform。

对于 Unix 风格的 shell，我通常建议将地址放在单引号中以禁用元字符解释，如下所示：

terragrunt import 'google_storage_bucket.buckets["a-test-test-test"]' a-test-test-test

我对@9​​87654324@ 没有太多经验，特别是在参考a copy of part of its documentation 时，我觉得上面的zsh 语法也是有效的。如果上述方法不起作用，可能值得尝试使用不同的 shell，例如 bash，看看是否会得到不同的结果。

虽然您特别提到了zsh，但为了完整起见，我还要注意，在 Windows 上，规则略有不同：传统的 Windows 命令行语法不支持单引号，因此很遗憾我们必须转义引号而是从 Windows 命令提示符运行 Terraform：

terragrunt import google_storage_bucket.buckets[\"a-test-test-test\"] a-test-test-test

重要的是地址中的引号字符"使其通过shell到达Terraform，以便Terraform可以成功地将参数解析为resource address syntax。

Answer 2

我使用 Terraform 模块中的数据来避免从 Terragrunt 调用的变量的这个问题 在 main.tf 中

data "azurerm_resource_group" "k8s" {
  name = var.resource_group_name
}

在 terragrunt.hcl 中

resource_group_name = "rgpazewsmlit-sandbox-xxxxx"