Terraform Azure使用for_each创建多VM关联NIC报错求助

核心原因 #

你触发错误的本质是VM资源for_each使用的键，和NIC资源for_each的实例键不匹配，导致用each.key或each.value索引NIC资源时，找不到对应的实例。

正确关联方式 #

根据你用map定义配置的场景，分两种常见情况处理：

情况1：VM与NIC一一对应，共用同一个map的key #

如果你的VM和对应NIC使用同一个配置map的key（比如vm1对应同名逻辑的NIC），直接用each.key关联即可：

# 定义共用的VM+NIC配置map
variable "vm_nic_configs" {
  type = map(object({
    vm_size     = string
    subnet_id   = string
    private_ip  = string
  }))
  default = {
    vm1 = { 
      vm_size    = "Standard_D2s_v3"
      subnet_id  = azurerm_subnet.main.id
      private_ip = "10.0.0.4"
    }
    vm2 = { 
      vm_size    = "Standard_D2s_v3"
      subnet_id  = azurerm_subnet.main.id
      private_ip = "10.0.0.5"
    }
  }
}

# 创建NIC资源，for_each用上面的map
resource "azurerm_network_interface" "nics" {
  for_each = var.vm_nic_configs
  name                = "${each.key}-nic"
  location            = azurerm_resource_group.main.location
  resource_group_name = azurerm_resource_group.main.name

  ip_configuration {
    name                          = "internal"
    subnet_id                     = each.value.subnet_id
    private_ip_address            = each.value.private_ip
    private_ip_address_allocation = "Static"
  }
}

# 创建VM资源，同样用这个map，直接用each.key关联NIC
resource "azurerm_linux_virtual_machine" "vms" {
  for_each = var.vm_nic_configs
  name                = each.key
  resource_group_name = azurerm_resource_group.main.name
  location            = azurerm_resource_group.main.location
  size                = each.value.vm_size
  admin_username      = "adminuser"
  admin_password      = "P@ssw0rd123!"

  # 关键：用each.key索引NIC资源，因为两者共用同一个键集合
  network_interface_ids = [azurerm_network_interface.nics[each.key].id]

  os_disk {
    caching              = "ReadWrite"
    storage_account_type = "Premium_LRS"
  }

  source_image_reference {
    publisher = "Canonical"
    offer     = "0001-com-ubuntu-server-jammy"
    sku       = "22_04-lts"
    version   = "latest"
  }
}

情况2：VM与NIC用不同的map，需通过配置字段关联 #

如果VM和NIC是分开的map配置，必须在VM的配置里明确指定对应NIC的key，再用这个key去索引NIC资源：

# 单独的NIC配置map
variable "nic_configs" {
  type = map(object({
    subnet_id   = string
    private_ip  = string
  }))
  default = {
    nic1 = { 
      subnet_id  = azurerm_subnet.main.id
      private_ip = "10.0.0.4"
    }
    nic2 = { 
      subnet_id  = azurerm_subnet.main.id
      private_ip = "10.0.0.5"
    }
  }
}

# 单独的VM配置map，其中包含对应NIC的key字段
variable "vm_configs" {
  type = map(object({
    vm_size  = string
    nic_key  = string # 这里指定要关联的NIC的key
  }))
  default = {
    vm1 = { 
      vm_size = "Standard_D2s_v3"
      nic_key = "nic1"
    }
    vm2 = { 
      vm_size = "Standard_D2s_v3"
      nic_key = "nic2"
    }
  }
}

# 创建NIC资源
resource "azurerm_network_interface" "nics" {
  for_each = var.nic_configs
  name                = each.key
  location            = azurerm_resource_group.main.location
  resource_group_name = azurerm_resource_group.main.name

  ip_configuration {
    name                          = "internal"
    subnet_id                     = each.value.subnet_id
    private_ip_address            = each.value.private_ip
    private_ip_address_allocation = "Static"
  }
}

# 创建VM资源，用vm_configs里的nic_key字段关联NIC
resource "azurerm_linux_virtual_machine" "vms" {
  for_each = var.vm_configs
  name                = each.key
  resource_group_name = azurerm_resource_group.main.name
  location            = azurerm_resource_group.main.location
  size                = each.value.vm_size
  admin_username      = "adminuser"
  admin_password      = "P@ssw0rd123!"

  # 关键：用each.value.nic_key索引NIC资源，这个值必须存在于nic_configs的key集合中
  network_interface_ids = [azurerm_network_interface.nics[each.value.nic_key].id]

  os_disk {
    caching              = "ReadWrite"
    storage_account_type = "Premium_LRS"
  }

  source_image_reference {
    publisher = "Canonical"
    offer     = "0001-com-ubuntu-server-jammy"
    sku       = "22_04-lts"
    version   = "latest"
  }
}

错误复盘 #

• 你用azurerm_network_interface.nics[each.value].id时，如果each.value不是NIC资源for_each的key，自然找不到对应实例
• 用azurerm_network_interface.nics[each.key].id时，如果VM的each.key不在NIC的for_each键集合里，同样会触发索引错误

内容的提问来源于stack exchange，提问作者ITBYD