Terraform报错：collection elements cannot be unified问题解决咨询

问题现象 #

使用Terraform 1.7.5 + AzureRM 3.98.0部署多个App Service时，若appservicelist中不同资源的settings字段结构不一致（如示例中appsvc2多了always_on配置），会触发报错：

The given value is not valid for variable "appservicelist": collection elements cannot be unified

仅当所有资源的settings键完全一致时，才能正常生成执行计划。

相关配置代码 #

env.auto.tfvars #

appservicelist = {
    appsvc1 = {
        appsvcname = "appsvctest01"
        rgname = "appsvcrg01"
        settings = {
            site_config = {
                minimum_tls_version = "1.2"
                http2_enabled       = true
                application_stack = {
                    java_version = "17"
                }
            }
        }
    },
    appsvc2 = {
        appsvcname = "appsvctest02"
        rgname = "appsvcrg02"
        settings = {
            site_config = {
                minimum_tls_version = "1.2"
                http2_enabled       = true
                always_on           = true
                application_stack = {
                    java_version = "17"
                }
            }
        }
    }
}

根模块main.tf #

module "appservice" {
    for_each = var.appservicelist
    source = "./modules/appservice"
    appsvcname  = each.value.appsvcname
    rgname      = each.value.rgname
    settings    = each.value.settings
}

根模块variables.tf（原错误写法） #

variable "appservicelist" {
    type = map(object({
        appsvcname = string
        rgname = string
        settings = any
    }) )
}

子模块./modules/appservice/main.tf #

resource "azurerm_linux_web_app" "appservice" {
    name = var.appsvcname
    rgname = var.rgname

    dynamic "site_config" {
        for_each = lookup(var.settings, "site_config", {}) != {} ? [1] : []
        content {
            always_on = lookup(var.settings.site_config, "always_on", false)
            http2_enabled = lookup(var.settings.site_config, "http2_enabled", false)
            minimum_tls_version = lookup(var.settings.site_config, "http2_enabled", null)
            ...
            ...
        }

        dynamic "application_stack" {
            for_each = lookup(var.settings.site_config, "application_stack", {}) != {} ? [1] : []
            content {
                java_version = lookup(var.settings.site_config.application_stack, "java_version", null)
            }
        }
    }
}

子模块./modules/appservice/variables.tf（原错误写法） #

variable "appsvcname" {}
variable "rgname" {}
variable "settings" {
    type = any
    default = {}
}

解决方案 #

核心原因是根模块中settings字段使用了any类型，Terraform需要统一map内所有元素的类型，当不同元素的settings结构存在差异时，无法完成类型统一。解决思路是给settings定义明确的可选类型结构，让Terraform识别差异字段为可选配置，而非结构不一致。

步骤1：修正根模块variables.tf #

将settings的类型从any改为包含可选字段的明确对象结构：

variable "appservicelist" {
  type = map(object({
    appsvcname = string
    rgname     = string
    settings = object({
      site_config = object({
        minimum_tls_version = string
        http2_enabled       = bool
        always_on           = optional(bool, false) # 标记为可选字段，默认值false
        application_stack = object({
          java_version = string
        })
      })
    })
  }))
}

步骤2：修正子模块variables.tf #

同样给子模块的settings定义明确的可选结构，避免使用any：

variable "appsvcname" {
  type = string
}

variable "rgname" {
  type = string
}

variable "settings" {
  type = object({
    site_config = object({
      minimum_tls_version = string
      http2_enabled       = bool
      always_on           = optional(bool, false)
      application_stack = object({
        java_version = string
      })
    })
  })
  default = {
    site_config = {
      minimum_tls_version = "1.2"
      http2_enabled       = false
      application_stack = {
        java_version = "11" # 可根据业务需求设置默认值
      }
    }
  }
}

步骤3：优化子模块main.tf（可选，增强严谨性） #

由于已经明确了类型，无需再用lookup，直接引用字段即可，可选字段会自动使用默认值；同时修正原代码中资源组参数的错误（AzureRM资源要求参数为resource_group_name而非rgname）：

resource "azurerm_linux_web_app" "appservice" {
  name                = var.appsvcname
  resource_group_name = var.rgname

  site_config {
    always_on           = var.settings.site_config.always_on
    http2_enabled       = var.settings.site_config.http2_enabled
    minimum_tls_version = var.settings.site_config.minimum_tls_version

    application_stack {
      java_version = var.settings.site_config.application_stack.java_version
    }
  }
}

补充：可选嵌套结构处理 #

如果site_config或application_stack本身也是可选配置（部分资源不需要），可以将它们标记为optional：

settings = object({
  site_config = optional(object({
    minimum_tls_version = string
    http2_enabled       = bool
    always_on           = optional(bool, false)
    application_stack   = optional(object({ java_version = string }), {})
  }), {})
})

内容的提问来源于stack exchange，提问作者Dilly B