如何用Terraform实现NLB目标组EC2实例的循环关联配置？

问题背景 #

现有9台EC2实例，需创建9个NLB，每个NLB关联3台EC2实例，遵循循环顺序：

• NLB1关联实例1、9、8
• NLB2关联实例2、1、9
• ...
• NLB9关联实例9、8、7

当前配置NLB时，仅引用count.index对应的EC2实例可正常运行，但添加count.index-1和count.index-2的实例引用时触发语法错误，且尝试在模块内定义locals块也失败。

当前NLB配置 #

module "shard-nlb" {
  source  = "../../alb-module/aws"

  count                 = var.shard_count
  load_balancer_type    = "network"
  vpc_id                = var.vpc_id
  subnets               = var.shard_double_subnet_ids[count.index % length(var.shard_subnet_ids)]
  security_groups       = concat(data.aws_security_groups.sg_xyz.ids, data.aws_security_groups.sg_abc.ids)
  target_groups =  [
  {
      name_prefix       = "SHnlb-"
      backend_protocol  = "TCP"
      backend_port      = 5678
      target_type       = "instance"
      preserve_client_ip   = false
      targets = [
      {
          target_id = aws_instance.shard-ec2[count.index].id
          port = 5678
      },
      {
          target_id = aws_instance.shard-ec2[count.index-1].id
          port = 5678
      },
      {
          target_id = aws_instance.shard-ec2[count.index-2].id
          port = 5678
      }
      ]
  }
  ]

  http_tcp_listeners    =  [
  {
        port               = 443
        protocol           = "TCP"
        target_group_index = 0
  }
  ]
  internal              = "internal"
  tags                  = module.label.tags
  name                  = lower("SH-nlb-${count.index+1}")
}

报错信息 #

1. 索引引用错误：

│ Error: Invalid "count" attribute
│ 
│   on shard_infra.tf line 112, in module "shard-nlb":
│  112:           target_id = aws_instance.shard-ec2[count.index-1].id
│ 
│ The "count" object does not have an attribute named "index-1". The only
│ supported attribute is count.index, which is the index of each instance of
│ a resource block that has the "count" argument set.

2. 模块内定义locals失败：

"The block type name "locals" is reserved for use by Terraform in a future version."

EC2实例配置 #

resource "aws_instance" "shard-ec2" {
 count                  = var.shard_count
 ami                    = data.aws_ami.id
 instance_type          = "t3.medium"
 key_name               = var.key_name
 iam_instance_profile   = var.iam_instance_profile
 tags                   = merge(module.label.tags,{"Name" = "shard-${count.index+1}"})
 subnet_id              = var.shard_subnet_ids[count.index % length(var.shard_subnet_ids)]
 ebs_optimized          = true
 vpc_security_group_ids = concat(data.aws_security_groups.sg_xyz.ids, data.aws_security_groups.sg_abc.ids)
 user_data              = templatefile( var.shard_filepath)
 user_data_replace_on_change = false
 root_block_device{
     volume_type = "gp3"
     volume_size = 300
     delete_on_termination = true
     tags = merge(module.label.tags,{"Name" = "shard-${count.index+1}"})
 }
  lifecycle {
    ignore_changes = [ tags, tags_all ]
  }
}

解决方案 #

核心问题分析 #

• Terraform不允许直接在列表索引中使用count.index-1这类未包裹的表达式，且负数索引会触发错误。
• 模块内部不能定义locals块，locals必须放在Terraform配置的根层级（与resource、module同级）。

修正步骤 #

1. 根层级定义本地变量：利用mod函数计算每个NLB对应的EC2实例索引，通过(索引偏移 + 总实例数) % 总实例数避免负数索引，实现循环逻辑。
2. 修改NLB模块引用：使用预计算的索引列表关联EC2实例。

修正后完整配置 #

1. 根层级添加locals

locals {
  # 为每个NLB生成对应的3个EC2实例索引，实现循环关联
  nlb_target_indices = [
    for i in range(var.shard_count) : [
      i,
      (i - 1 + var.shard_count) % var.shard_count,
      (i - 2 + var.shard_count) % var.shard_count
    ]
  ]
}

2. 更新NLB模块配置

module "shard-nlb" {
  source  = "../../alb-module/aws"

  count                 = var.shard_count
  load_balancer_type    = "network"
  vpc_id                = var.vpc_id
  subnets               = var.shard_double_subnet_ids[count.index % length(var.shard_subnet_ids)]
  security_groups       = concat(data.aws_security_groups.sg_xyz.ids, data.aws_security_groups.sg_abc.ids)
  target_groups =  [
  {
      name_prefix       = "SHnlb-"
      backend_protocol  = "TCP"
      backend_port      = 5678
      target_type       = "instance"
      preserve_client_ip   = false
      targets = [
      {
          target_id = aws_instance.shard-ec2[local.nlb_target_indices[count.index][0]].id
          port = 5678
      },
      {
          target_id = aws_instance.shard-ec2[local.nlb_target_indices[count.index][1]].id
          port = 5678
      },
      {
          target_id = aws_instance.shard-ec2[local.nlb_target_indices[count.index][2]].id
          port = 5678
      }
      ]
  }
  ]

  http_tcp_listeners    =  [
  {
        port               = 443
        protocol           = "TCP"
        target_group_index = 0
  }
  ]
  internal              = "internal"
  tags                  = module.label.tags
  name                  = lower("SH-nlb-${count.index+1}")
}

说明 #

• local.nlb_target_indices是二维列表，每个子列表对应一个NLB的EC2实例索引：当var.shard_count=9时，local.nlb_target_indices[0]为[0,8,7]（对应NLB1关联实例1、9、8），local.nlb_target_indices[1]为[1,0,8]（对应NLB2关联实例2、1、9），完全匹配需求。
• 使用(i - n + var.shard_count) % var.shard_count确保索引始终在合法范围内，避免负数越界问题。
• locals块必须放在根层级，这是Terraform的语法约束。

内容的提问来源于stack exchange，提问作者V S