Terraform中Azure Windows VM关联多NIC的列表与字符串转换问题

云上老周

2026-8-5

Terraform部署Azure Windows VM时动态关联多NIC的索引错误解决

在使用Terraform部署Azure Windows虚拟机时，需为每个VM关联指定的多个网络接口（NIC）。通过变量windows_vm传入每个VM对应的NIC名称列表，但在尝试获取对应NIC ID列表时遇到索引错误：无法用列表作为索引访问NIC数据源对象。尝试使用values函数及本地值生成NIC ID映射的方法均未成功，现需解决如何为每个VM动态生成对应的NIC ID列表的问题。

变量定义

variable "resource_groups" {
  description = "资源组"
  type = map(object({
    location = string
  }))
}

variable "virtual_networks" {
  description = "虚拟网络及属性"
  type = map(object({
    resource_group_name = string
    address_space       = list(string)
  }))
}

variable "subnets" {
  description = "子网及属性"
  type = map(object({
    resource_group_name  = string
    virtual_network_name = string
    address_prefixes     = list(string)
  }))
}

variable "nic" {
  description = "网络接口"
  type = map(object({
    subnet_name         = string
    resource_group_name = string
  }))
}

variable "admin_password" {
  type      = string
  sensitive = true
}

variable "admin_user" {
  type      = string
  sensitive = true
}

variable "windows_vm" {
  description = "Windows虚拟机"
  type = map(object({
    network_interface_names = list(string)
    resource_group_name     = string
    size                    = string
    timezone                = string
  }))
}

输入示例

resource_groups = {
  rg-eastus-dev1 = {
    location = "eastus"
  }
}

virtual_networks = {
  vnet-dev1 = {
    resource_group_name = "rg-eastus-dev1"
    address_space       = ["10.0.0.0/16"]
  }
}

subnets = {
  snet-01 = {
    resource_group_name  = "rg-eastus-dev1"
    virtual_network_name = "vnet-dev1"
    address_prefixes     = ["10.0.1.0/24"]
  }
}

nic = {
  nic1 = {
    subnet_name         = "snet-01"
    resource_group_name = "rg-eastus-dev1"
  }
}

admin_password = "s}8cpH96qa.1BQ"
admin_user     = "padmin"

windows_vm = {
  winvm1 = {
    network_interface_names = ["nic1"]
    resource_group_name     = "rg-eastus-dev1"
    size                    = "Standard_B2s"
    timezone                = "Eastern Standard Time"
  }
}

主配置代码

resource "azurerm_resource_group" "rgs" {
  for_each = var.resource_groups
  name     = each.key
  location = each.value["location"]
}

data "azurerm_resource_group" "rgs" {
  for_each = var.resource_groups
  name     = each.key
  depends_on = [
    azurerm_resource_group.rgs
  ]
}

resource "azurerm_virtual_network" "vnet" {
  for_each            = var.virtual_networks
  name                = each.key
  resource_group_name = each.value["resource_group_name"]
  address_space       = each.value["address_space"]
  location            = data.azurerm_resource_group.rgs[each.value["resource_group_name"]].location
}

resource "azurerm_subnet" "subnet" {
  for_each             = var.subnets
  name                 = each.key
  resource_group_name  = each.value["resource_group_name"]
  virtual_network_name = each.value["virtual_network_name"]
  address_prefixes     = each.value["address_prefixes"]
  depends_on = [
    azurerm_virtual_network.vnet
  ]
}

data "azurerm_subnet" "subnet" {
  for_each             = var.subnets
  name                 = each.key
  virtual_network_name = each.value["virtual_network_name"]
  resource_group_name  = each.value["resource_group_name"]
  depends_on = [
    azurerm_resource_group.rgs
  ]
}

resource "azurerm_network_interface" "nics" {
  for_each = var.nic
  ip_configuration {
    name                          = each.key
    subnet_id                     = data.azurerm_subnet.subnet[each.value["subnet_name"]].id
    private_ip_address_allocation = "Dynamic"
  }
  location            = data.azurerm_resource_group.rgs[each.value["resource_group_name"]].location
  name                = each.key
  resource_group_name = each.value["resource_group_name"]
  depends_on = [
    azurerm_resource_group.rgs,
    azurerm_subnet.subnet
  ]
}

data "azurerm_network_interface" "nics" {
  for_each            = var.nic
  name                = each.key
  resource_group_name = each.value["resource_group_name"]
  depends_on = [
    azurerm_resource_group.rgs
  ]
}

resource "azurerm_windows_virtual_machine" "windows_vm" {
  for_each              = var.windows_vm
  admin_password        = var.admin_password
  admin_username        = var.admin_user
  location              = data.azurerm_resource_group.rgs[each.value["resource_group_name"]].location
  name                  = each.key
  network_interface_ids = values(data.azurerm_network_interface.nics[each.value["network_interface_names"]].id)
  os_disk {
    caching              = "ReadWrite"
    storage_account_type = "Standard_LRS"
  }
  resource_group_name = each.value["resource_group_name"]
  size                = each.value["size"]
  timezone            = each.value["timezone"]
  source_image_reference {
    publisher = "MicrosoftWindowsServer"
    offer     = "WindowsServer"
    sku       = "2019-Datacenter"
    version   = "latest"
  }
}

当前错误信息

╷
│ Error: Invalid index
│ 
│   on main.tf line 75, in resource "azurerm_windows_virtual_machine" "windows_vm":
│   75:   network_interface_ids = values(data.azurerm_network_interface.nics[each.value["network_interface_names"]].id)
│     ├────────────────
│     │ data.azurerm_network_interface.nics is object with 1 attribute "nic1"
│     │ each.value["network_interface_names"] is list of string with 1 element
│ 
│ The given key does not identify an element in this collection value: string required.

尝试过的无效方案

locals {
  nic_ids {
    [for k, v in var.windows_vm : k => v {data.azurerm_network_interface.nics[v.network_interface_names]}.id]
  }
}


resource "azurerm_windows_virtual_machine" "windows_vm" {
  for_each       = var.windows_vm
  admin_password = var.admin_password
  admin_username = var.admin_user
  location       = data.azurerm_resource_group.rgs[each.value["resource_group_name"]].location
  name           = each.key
  network_interface_ids = values(local.nic_ids[each.key])
  os_disk {
    caching              = "ReadWrite"
    storage_account_type = "Standard_LRS"
  }
  resource_group_name = each.value["resource_group_name"]
  size                = each.value["size"]
  timezone            = each.value["timezone"]
  source_image_reference {
    publisher = "MicrosoftWindowsServer"
    offer     = "WindowsServer"
    sku       = "2019-Datacenter"
    version   = "latest"
  }
}

解决方案

错误核心原因是data.azurerm_network_interface.nics是映射（map）类型，只能用单个字符串作为索引，不能直接传入列表。需要通过for表达式遍历NIC名称列表，逐个提取对应ID。

方法1：直接在VM资源中生成ID列表

修改VM资源的network_interface_ids字段，用for表达式遍历NIC名称列表：

resource "azurerm_windows_virtual_machine" "windows_vm" {
  for_each              = var.windows_vm
  admin_password        = var.admin_password
  admin_username        = var.admin_user
  location              = data.azurerm_resource_group.rgs[each.value["resource_group_name"]].location
  name                  = each.key
  # 遍历NIC名称列表，逐个获取对应ID
  network_interface_ids = [for nic_name in each.value.network_interface_names : data.azurerm_network_interface.nics[nic_name].id]
  os_disk {
    caching              = "ReadWrite"
    storage_account_type = "Standard_LRS"
  }
  resource_group_name = each.value["resource_group_name"]
  size                = each.value["size"]
  timezone            = each.value["timezone"]
  source_image_reference {
    publisher = "MicrosoftWindowsServer"
    offer     = "WindowsServer"
    sku       = "2019-Datacenter"
    version   = "latest"
  }
}

方法2：通过本地值预生成ID映射

如果需要复用NIC ID映射逻辑，可以定义本地值提前生成每个VM对应的ID列表：

locals {
  # 先构建NIC名称到ID的映射
  nic_id_map = {for nic_name, nic_data in data.azurerm_network_interface.nics : nic_name => nic_data.id}
  
  # 为每个VM生成对应的NIC ID列表
  vm_nic_ids = {
    for vm_name, vm_data in var.windows_vm : vm_name => [
      for nic_name in vm_data.network_interface_names : local.nic_id_map[nic_name]
    ]
  }
}

resource "azurerm_windows_virtual_machine" "windows_vm" {
  for_each              = var.windows_vm
  admin_password        = var.admin_password
  admin_username        = var.admin_user
  location              = data.azurerm_resource_group.rgs[each.value["resource_group_name"]].location
  name                  = each.key
  network_interface_ids = local.vm_nic_ids[each.key]
  os_disk {
    caching              = "ReadWrite"
    storage_account_type = "Standard_LRS"
  }
  resource_group_name = each.value["resource_group_name"]
  size                = each.value["size"]
  timezone            = each.value["timezone"]
  source_image_reference {
    publisher = "MicrosoftWindowsServer"
    offer     = "WindowsServer"
    sku       = "2019-Datacenter"
    version   = "latest"
  }
}

额外优化

当前配置中同时创建了azurerm_network_interface.nics资源和对应的数据源，其实无需额外调用数据源，直接引用已创建的资源ID即可，减少不必要的资源依赖：

# 替换数据源引用为资源引用
network_interface_ids = [for nic_name in each.value.network_interface_names : azurerm_network_interface.nics[nic_name].id]

内容的提问来源于stack exchange，提问作者Vegas588

Terraform中Azure Windows VM关联多NIC的列表与字符串转换问题

变量定义 #

输入示例 #

主配置代码 #

当前错误信息 #

尝试过的无效方案 #

解决方案 #

方法1：直接在VM资源中生成ID列表 #

方法2：通过本地值预生成ID映射 #

额外优化 #