如何通过Terraform为Azure函数应用的Event Hub触发器创建连接？

可以通过Terraform完成Azure函数的Event Hub触发器连接配置，但Azure并没有单独的Event Hub Connection Terraform资源。这类连接是通过函数应用的应用设置 + 函数的绑定配置共同实现的，以下是修正后的配置方案：

核心问题分析 #

你的现有配置存在两处关键问题：

• 第一个绑定配置中混用了HTTP触发器的authLevel参数，且name设置为req不符合Event Hub触发器的参数命名逻辑
• 第二个绑定配置直接将连接字符串硬编码在connection字段中，正确做法是将连接字符串存入应用设置，再通过键名引用

修正后的完整配置示例 #

# 1. 资源组（若未创建需添加）
resource "azurerm_resource_group" "azure-xxxxx" {
  name     = "example-resources"
  location = "East US"
}

# 2. Event Hub命名空间
resource "azurerm_eventhub_namespace" "azure-xxxxx" {
  name                = "example-eventhub-namespace"
  location            = azurerm_resource_group.azure-xxxxx.location
  resource_group_name = azurerm_resource_group.azure-xxxxx.name
  sku                 = "Standard"
  capacity            = 1
}

# 3. 目标Event Hub
resource "azurerm_eventhub" "azure-xxxx" {
  name                = "example-eventhub"
  namespace_name      = azurerm_eventhub_namespace.azure-xxxxx.name
  resource_group_name = azurerm_resource_group.azure-xxxxx.name
  partition_count     = 4
  message_retention   = 1
}

# 4. 存储账户（函数应用必需）
resource "azurerm_storage_account" "azure-xxxxx" {
  name                     = "examplestorageacc"
  resource_group_name      = azurerm_resource_group.azure-xxxxx.name
  location                 = azurerm_resource_group.azure-xxxxx.location
  account_tier             = "Standard"
  account_replication_type = "LRS"
}

# 5. Linux服务计划
resource "azurerm_service_plan" "example-linux-serviceplan" {
  name                = "linux-service-plan"
  resource_group_name = azurerm_resource_group.azure-xxxxx.name
  location            = azurerm_resource_group.azure-xxxxx.location
  os_type             = "Linux"
  sku_name            = "S1"
}

# 6. Linux函数应用
resource "azurerm_linux_function_app" "example-linux-app" {
  name                = "example-linux-app"
  resource_group_name = azurerm_resource_group.azure-xxxxx.name
  location            = azurerm_resource_group.azure-xxxxx.location
  service_plan_id     = azurerm_service_plan.example-linux-serviceplan.id

  storage_account_name       = azurerm_storage_account.azure-xxxxx.name
  storage_account_access_key = azurerm_storage_account.azure-xxxxx.primary_access_key

  # 将Event Hub连接字符串存入应用设置
  app_settings = {
    # 使用命名空间连接字符串 + EntityPath指定具体Event Hub
    "EVENTHUB_CONNECTION_STRING" = "${azurerm_eventhub_namespace.azure-xxxxx.default_primary_connection_string};EntityPath=${azurerm_eventhub.azure-xxxx.name}"
  }

  site_config {
    application_stack {
      node_version = "18"
    }
  }
}

# 7. Event Hub触发的函数
resource "azurerm_function_app_function" "example" {
  name            = "example-eventhub-trigger"
  function_app_id = azurerm_linux_function_app.example-linux-app.id
  
  config_json = jsonencode({
    "bindings" = [
      {
        "name"          = "eventHubMessages" # 对应函数代码中接收消息的参数名
        "type"          = "eventHubTrigger"
        "direction"     = "in"
        "eventHubName"  = azurerm_eventhub.azure-xxxx.name
        "connection"    = "EVENTHUB_CONNECTION_STRING" # 引用应用设置中的键名
        "cardinality"   = "many"
        "consumerGroup" = "$Default"
      }
    ],
    "disabled" = false
  })

  # 同步函数代码与配置文件
  files = {
    "index.js" = <<-EOT
      module.exports = async function (context, eventHubMessages) {
        context.log(`Received ${eventHubMessages.length} messages from Event Hub`);
        eventHubMessages.forEach(message => {
          context.log('Message:', message);
        });
      };
    EOT
    "function.json" = jsonencode({
      "bindings" = [
        {
          "name"          = "eventHubMessages"
          "type"          = "eventHubTrigger"
          "direction"     = "in"
          "eventHubName"  = azurerm_eventhub.azure-xxxx.name
          "connection"    = "EVENTHUB_CONNECTION_STRING"
          "cardinality"   = "many"
          "consumerGroup" = "$Default"
        }
      ]
    })
  }
}

关键配置要点 #

• 应用设置存储连接字符串：将包含EntityPath的Event Hub连接字符串存入函数应用的app_settings，避免硬编码，提升配置灵活性
• 函数绑定参数规范：
  • name需与函数代码中接收消息的参数名一致
  • connection引用应用设置的键名，而非直接写入连接字符串
  • 移除HTTP触发器专属的authLevel参数，Event Hub触发器无需该配置
• 同步函数代码与配置：通过files字段同步函数代码和function.json，确保绑定配置与业务逻辑匹配

内容的提问来源于stack exchange，提问作者Ruwan Ranganath Senarathne