如何将azurerm_resource_group_template_deployment用于预算资源而忽略开始日期和结束日期的更改？

Question

可能是相关的：azurerm_resource_group_template_deployment ignoring parameter file

我想使用TerraformVersion0.37中的资源azurerm_resource_group_template_deployment。但是Terraform想每月重新应用资源存在一个问题，所以我想我可以告诉您忽略对开始日期和结束日期的更改，但是这将需要一个计算操作，即jsondecode，这是不允许的。也就是说，以下代码将不起作用。

terraform {
  required_version = "~> 0.13.0"
  required_providers {
    azurerm = "~> 2.37.0"
  }
}

provider azurerm {
  features {}
}

locals {
  budget_start_date = formatdate("YYYY-MM-01", timestamp())
  budget_end_date = formatdate("YYYY-MM-01", timeadd(timestamp(), "17568h"))
  budget_params = jsonencode({
    "budgetName" = "budgettest",
    "amount" = "4000",
    "timeGrain" = "Annually",
    "startDate" = local.budget_start_date,
    "endDate" = local.budget_end_date,
    "firstThreshold" = "75",
    "secondThreshold" = "100",
    "thirdThreshold" = "50",
    "contactGroups" = ""
  }) 
  }

resource "azurerm_resource_group" "rg" {
  # A subscription cannot have more than 980 resource groups:
  # https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits
  name = "example-rg"
  location = "westeurope"
}

resource "azurerm_resource_group_template_deployment" "dsw_budget" {
  name = "test-budget-template"
  resource_group_name = azurerm_resource_group.rg[0].name
  deployment_mode = "Incremental"

  template_content = file("${path.module}/arm/budget_deploy.json")

  parameters_content = local.budget_params
  
  lifecycle {
    ignore_changes = [
      jsondecode(parameters_content)["startDate"],
      jsondecode(parameters_content)["endDate"]
    ]
  }

}

为了完整起见，budget_deploy.json的内容

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "budgetName": {
      "type": "string",
      "defaultValue": "MyBudget"
    },
    "amount": {
      "type": "string",
      "defaultValue": "1000"
    },
    "timeGrain": {
      "type": "string",
      "defaultValue": "Monthly",
      "allowedValues": [
        "Monthly",
        "Quarterly",
        "Annually"
      ]
    },
    "startDate": {
      "type": "string"
    },
    "endDate": {
      "type": "string"
    },
    "firstThreshold": {
      "type": "string",
      "defaultValue": "90"
    },
    "secondThreshold": {
      "type": "string",
      "defaultValue": "110"
    },
    "thirdThreshold": {
      "type": "string",
      "defaultValue": "80"
    },
    "contactEmails": {
      "type": "string",
      "defaultValue": ""
    },
    "contactGroups": {
      "type": "string",
      "defaultValue": ""
    },
    "location": {
      "type": "string",
      "defaultValue": "[resourceGroup().location]"
    }
  },
  "variables": {
    "groups": "[split(parameters('contactGroups'),',')]"
  },
  "resources": [
    {
      "name": "[parameters('budgetName')]",
      "type": "Microsoft.Consumption/budgets",
      "location": "[parameters('location')]",
      "apiVersion": "2019-10-01",
      "properties": {
        "timePeriod": {
          "startDate": "[parameters('startDate')]",
          "endDate": "[parameters('endDate')]"
        },
        "timeGrain": "[parameters('timeGrain')]",
        "amount": "[parameters('amount')]",
        "category": "Cost",
        "notifications": {
          "NotificationForExceededBudget1": {
            "enabled": true,
            "operator": "GreaterThan",
            "threshold": "[parameters('firstThreshold')]",
            "contactGroups": "[variables('groups')]"
          },
          "NotificationForExceededBudget2": {
            "enabled": true,
            "operator": "GreaterThan",
            "threshold": "[parameters('secondThreshold')]",
            "contactGroups": "[variables('groups')]"
          },
          "NotificationForExceededBudget3": {
            "enabled": true,
            "operator": "GreaterThan",
            "threshold": "[parameters('thirdThreshold')]",
            "contactGroups": "[variables('groups')]"
          }
        }
      }
    }
  ]
}

我还能实现我的目标吗？-谢谢！

Answer 1

我诉诸于使用标签结束和开始日期的预算。ignore_changes将用于不推荐的azurerm_template_deployment，因为参数在这种情况下是map类型的，而不是json类型的参数，如下所示：

terraform {
  required_version = "~> 0.13.0"
  required_providers {
    azurerm = "~> 2.37.0"
  }
}

provider azurerm {
  features {}
}

locals {
  budget_start_date = formatdate("YYYY-MM-01", timestamp())
  budget_end_date = formatdate("YYYY-MM-01", timeadd(timestamp(), "17568h"))
  budget_params = {
    "budgetName" = "budgettest",
    "amount" = "4000",
    "timeGrain" = "Annually",
    "startDate" = local.budget_start_date,
    "endDate" = local.budget_end_date,
    "firstThreshold" = "75",
    "secondThreshold" = "100",
    "thirdThreshold" = "50",
    "contactGroups" = ""
  }
  }

resource "azurerm_resource_group" "rg" {
  # A subscription cannot have more than 980 resource groups:
  # https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits
  name = "example-rg"
  location = "westeurope"
}

resource "azurerm_template_deployment" "dsw_budget" {
  name = "test-budget-template"
  resource_group_name = azurerm_resource_group.rg[0].name
  deployment_mode = "Incremental"

  template_content = file("${path.module}/arm/budget_deploy.json")

  parameters_content = local.budget_params
  
  lifecycle {
    ignore_changes = [
      parameters["startDate"],
      parameters["endDate"]
    ]
  }

}

现在，这在azurerm_resource_group_template_deployment中是不可能的，因为json内容必须传递，因此在ignore_changes中必须进行json解码，这是一种计算操作，这是不允许的。

因此，为了解决固定开始日期和结束日期的问题，我使用了开始日期和结束日期的标记，并使用数据源查询它们：

terraform {
  required_version = "~> 0.13.0"
  required_providers {
    azurerm = "~> 2.37.0"
  }
}

provider azurerm {
  features {
    template_deployment {
      delete_nested_items_during_deletion = false
    }
  }
}

data "azurerm_resources" "aml" {
  resource_group_name = "${var.tk_name_id}-${local.stage}-rg"
  type = "Microsoft.MachineLearningServices/workspaces"
}


locals {
  budget_start_date_tag = try(element(data.azurerm_resources.aml.resources[*].tags.budget_start_date, 0), "NA")
  budget_end_date_tag = try(element(data.azurerm_resources.aml.resources[*].tags.budget_end_date, 0), "NA")
  should_test_budget = local.is_test_stage_boolean && var.test_budget
  budget_start_date = local.budget_start_date_tag != "NA" ? local.budget_start_date_tag : (local.should_test_budget ? "START DATE FAIL!" : formatdate("YYYY-MM-01", timestamp()))
  budget_end_date = local.budget_end_date_tag != "NA" ? local.budget_end_date_tag : (local.should_test_budget ? "END DATE FAIL!" : formatdate("YYYY-MM-01", timeadd(timestamp(), "17568h")))
  budget_date_tags = {
     "budget_start_date" : local.budget_start_date,
     "budget_end_date" : local.budget_end_date
  }
}

#--------------------------------------------------------------------------------------------------------------------
# DSW: Resource Group 
# --------------------------------------------------------------------------------------------------------------------
resource "azurerm_resource_group" "rg" {
  # A subscription cannot have more than 980 resource groups:
  # https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits
  count = local.no_addresses_available_boolean ? 0 : 1
  name = "test-rg"
  location = var.location
  tags = local.budget_date_tags
}

resource "azurerm_machine_learning_workspace" "aml_workspace" {
  name = local.aml_ws_name
  resource_group_name = azurerm_resource_group.rg[0].name
  location = azurerm_resource_group.rg[0].location
  application_insights_id = azurerm_application_insights.aml_insights.id
  key_vault_id = azurerm_key_vault.aml_kv.id
  storage_account_id = azurerm_storage_account.aml_st.id
  container_registry_id = azurerm_container_registry.aml_acr.id
  sku_name = "Basic"
  tags = merge(var.azure_tags, local.budget_date_tags)
  identity {
    type = "SystemAssigned"
  }
}

@查尔斯徐，我还没有很好地测试它，我也不确定这是否是最好的解决方案？

编辑:现在，我实际上遇到了循环依赖关系，因为在创建资源组：https://github.com/hashicorp/terraform/issues/16380之前，数据源显然不存在。

Answer 2

我不认为你使用ignore_changes的方式是正确的。查看一下ignore_changes中的lifecycle中的每个资源。它应该是要创建的资源的属性，而不是价值。此外，如果您想通过Terraform中的Azure模板更改资源，最好使用Incremental deployment_mode，不要更改要忽略这些更改的属性。