使用Terraform为Azure Container App挂载共享卷失败求助

你遇到的ManagedEnvironmentStorageNotFound错误，核心原因是Azure Container App挂载Azure Files卷时，必须先将目标存储账户注册到它所属的Container App Managed Environment（容器应用环境）中，你的配置漏掉了这一步，导致环境无法识别存储账户。

以下是完整的Terraform配置流程，包含所有必需组件：

1. 基础资源（资源组、存储账户、文件共享） #

这部分你的原有配置没问题，保留即可：

resource "azurerm_resource_group" "rg" {
  name     = "my-resource-group"
  location = "East US"
}

resource "azurerm_storage_account" "storage" {
  name                     = "storage1"
  resource_group_name      = azurerm_resource_group.rg.name
  location                 = azurerm_resource_group.rg.location
  account_tier             = "Standard"
  account_replication_type = "LRS"
}

resource "azurerm_storage_share" "share" {
  name                 = "storage1_share"
  quota                = 200
  storage_account_name = azurerm_storage_account.storage.name
  depends_on           = [azurerm_storage_account.storage]
}

2. 创建Container App Managed Environment #

所有Container App必须归属到一个Managed Environment，这是挂载存储的前提：

resource "azurerm_container_app_environment" "env" {
  name                = "my-container-app-env"
  resource_group_name = azurerm_resource_group.rg.name
  location            = azurerm_resource_group.rg.location
}

3. 将存储账户注册到Managed Environment #

通过azurerm_container_app_environment_storage资源，把存储账户和环境关联起来，这是解决报错的关键步骤：

resource "azurerm_container_app_environment_storage" "env_storage" {
  name                       = "storage1-env-link"
  container_app_environment_id = azurerm_container_app_environment.env.id
  storage_account_id         = azurerm_storage_account.storage.id
  access_key                 = azurerm_storage_account.storage.primary_access_key
}

4. 配置Container App并挂载卷 #

修改原有Container App的template配置，注意volume块的参数要关联上面注册的环境存储：

resource "azurerm_container_app" "app" {
  name                = "data-svc-app"
  resource_group_name = azurerm_resource_group.rg.name
  location            = azurerm_resource_group.rg.location
  environment_id      = azurerm_container_app_environment.env.id

  template {
    container {
      name   = var.name_prefix
      image  = "${data.azurerm_container_registry.acr.login_server}/data_svc:latest"
      cpu    = 0.25
      memory = "0.5Gi"

      volume_mounts {
        name = "storage-volume" # 自定义卷名，和下面volume块的name一致
        path = "/mnt/storage"   # 容器内的挂载路径，可自定义
      }
    }

    volume {
      name         = "storage-volume"
      storage_type = "AzureFile"
      storage_name = azurerm_container_app_environment_storage.env_storage.name # 这里填环境存储的名称，不是存储账户名
      share_name   = azurerm_storage_share.share.name # 指定要挂载的文件共享名
    }
  }

  # 若需要其他配置（如注册表凭据、环境变量等）可在此补充
}

• azurerm_container_app_environment_storage：负责在Managed Environment和存储账户之间建立关联，让环境能识别并访问该存储。
• Container App的volume块：storage_name必须填写环境存储的名称（即azurerm_container_app_environment_storage的name），而非原始存储账户名，这是你之前配置的核心错误。
• volume_mounts的path：是容器内部的挂载路径，无需和文件共享名一致，可根据业务需求自定义。

内容的提问来源于stack exchange，提问作者mike01010