如何使用Terraform批量导入Azure中的多个子网？

要批量导入5个手动创建的Azure子网到Terraform，需要先调整代码结构实现批量资源定义，再通过命令或脚本完成导入，具体步骤如下：

1. 更新Terraform代码，批量定义子网资源 #

将单个子网资源块改为用for_each批量管理，这样可以统一维护所有子网，避免重复代码。修改后的代码如下（注意address_prefix要与你手动创建的子网实际网段保持一致）：

terraform {
  required_providers {
    azurerm = {
      source  = "hashicorp/azurerm"
      version = "=3.0.0"
    }
  } 
}

provider "azurerm" {
  features {}
}

resource "azurerm_resource_group" "myrg" {
  name     = "myRG"
  location = "WEST US 2"
}

resource "azurerm_virtual_network" "myvnet" {
  name                = "myvnet"
  resource_group_name = azurerm_resource_group.myrg.name
  location            = azurerm_resource_group.myrg.location
  address_space       = ["10.0.0.0/16"]
}

# 定义所有需要导入的子网参数
locals {
  subnets = {
    "vm-subnet"      = { address_prefix = "10.0.1.0/24" }
    "aks-subnet"     = { address_prefix = "10.0.2.0/24" }
    "acr-subnet"     = { address_prefix = "10.0.0.0/24" }
    "nsg-subnet"     = { address_prefix = "10.0.3.0/24" }
    "firewall-subnet"= { address_prefix = "10.0.4.0/24" }
  }
}

# 批量创建/导入子网资源
resource "azurerm_subnet" "mysubnets" {
  for_each             = local.subnets
  name                 = each.key
  address_prefixes     = [each.value.address_prefix]
  resource_group_name  = azurerm_resource_group.myrg.name
  virtual_network_name = azurerm_virtual_network.myvnet.name
}

2. 批量导入子网 #

Terraform没有原生的"一次性导入多个资源"命令，但可以通过手动批量执行导入命令或脚本实现：

方法一：手动执行导入命令 #

每个子网对应一条terraform import命令，格式为terraform import <资源地址> <Azure资源ID>。你可以先通过Azure CLI获取子网ID，再执行导入：

获取子网ID（示例）

# 获取vm-subnet的ID
az network vnet subnet show --resource-group myRG --vnet-name myvnet --name vm-subnet --query id -o tsv

执行导入命令

替换<你的订阅ID>为实际值，依次执行：

terraform import azurerm_subnet.mysubnets["vm-subnet"] /subscriptions/<你的订阅ID>/resourceGroups/myRG/providers/Microsoft.Network/virtualNetworks/myvnet/subnets/vm-subnet
terraform import azurerm_subnet.mysubnets["aks-subnet"] /subscriptions/<你的订阅ID>/resourceGroups/myRG/providers/Microsoft.Network/virtualNetworks/myvnet/subnets/aks-subnet
terraform import azurerm_subnet.mysubnets["acr-subnet"] /subscriptions/<你的订阅ID>/resourceGroups/myRG/providers/Microsoft.Network/virtualNetworks/myvnet/subnets/acr-subnet
terraform import azurerm_subnet.mysubnets["nsg-subnet"] /subscriptions/<你的订阅ID>/resourceGroups/myRG/providers/Microsoft.Network/virtualNetworks/myvnet/subnets/nsg-subnet
terraform import azurerm_subnet.mysubnets["firewall-subnet"] /subscriptions/<你的订阅ID>/resourceGroups/myRG/providers/Microsoft.Network/virtualNetworks/myvnet/subnets/firewall-subnet

方法二：用脚本自动批量导入（推荐） #

编写脚本自动获取子网ID并执行导入，减少手动操作：

Bash脚本

#!/bin/bash

# 替换为你的订阅ID
SUBSCRIPTION_ID="你的订阅ID"
RG_NAME="myRG"
VNET_NAME="myvnet"

# 子网列表
subnets=("vm-subnet" "aks-subnet" "acr-subnet" "nsg-subnet" "firewall-subnet")

for subnet in "${subnets[@]}"
do
  # 获取子网ID
  SUB_ID=$(az network vnet subnet show --resource-group $RG_NAME --vnet-name $VNET_NAME --name $subnet --query id -o tsv)
  # 执行导入
  terraform import azurerm_subnet.mysubnets["$subnet"] $SUB_ID
done

PowerShell脚本

# 替换为你的订阅ID
$subscriptionId = "你的订阅ID"
$rgName = "myRG"
$vnetName = "myvnet"

# 子网列表
$subnets = @("vm-subnet", "aks-subnet", "acr-subnet", "nsg-subnet", "firewall-subnet")

foreach ($subnet in $subnets) {
  # 获取子网ID
  $subId = az network vnet subnet show --resource-group $rgName --vnet-name $vnetName --name $subnet --query id -o tsv
  # 执行导入
  terraform import "azurerm_subnet.mysubnets[$subnet]" $subId
}

3. 验证导入结果 #

执行完导入后，运行terraform plan，如果输出显示"No changes. Your infrastructure matches the configuration."，说明导入成功，Terraform已接管这5个子网的管理。

内容的提问来源于stack exchange，提问作者Sreehari