如何用Terraform创建带指定容器数的多个Azure存储账户

要实现为不同存储账户创建对应数量的容器，核心是将存储账户与其专属的容器列表关联，通过for_each遍历实现批量创建，具体修改如下：

1. 重构变量结构 #

把原来独立的存储账户名和容器列表变量，合并为存储账户配置列表，每个元素包含存储账户的基本信息和对应的容器集合：

variable "storage_accounts" {
  type = list(object({
    name                     = string
    account_tier             = string
    account_replication_type = string
    containers = list(object({
      name                  = string
      container_access_type = string
    }))
  }))
  default = [
    {
      name                     = "storageaccount1"
      account_tier             = "Standard"
      account_replication_type = "LRS"
      containers = [
        { name = "sa1container1", container_access_type = "private" },
        { name = "sa1container2", container_access_type = "private" }
      ]
    },
    {
      name                     = "storageaccount2"
      account_tier             = "Standard"
      account_replication_type = "GRS"
      containers = [
        { name = "sa2container1", container_access_type = "blob" },
        { name = "sa2container2", container_access_type = "private" },
        { name = "sa2container3", container_access_type = "container" }
      ]
    }
  ]
}

2. 批量创建存储账户 #

使用for_each遍历上述变量，生成多个存储账户资源，以存储账户名作为唯一键，避免资源冲突：

resource "azurerm_resource_group" "rg" {
  name     = "test-rg"
  location = "eastus"
}

resource "azurerm_storage_account" "storageaccount" {
  for_each                = { for sa in var.storage_accounts : sa.name => sa }
  name                    = each.value.name
  resource_group_name     = azurerm_resource_group.rg.name
  location                = azurerm_resource_group.rg.location
  account_tier            = each.value.account_tier
  account_replication_type = each.value.account_replication_type
}

3. 为每个存储账户创建对应容器 #

通过嵌套for表达式，将所有存储账户的容器展开为扁平的键值对（键由「存储账户名+容器名」组成，避免重名），再用for_each遍历创建容器：

resource "azurerm_storage_container" "container" {
  for_each = {
    for sa in var.storage_accounts :
    "${sa.name}-${c.name}" => {
      storage_account_name = sa.name
      container_name      = c.name
      access_type         = c.container_access_type
    }
    for c in sa.containers
  }

  name                  = each.value.container_name
  storage_account_name  = azurerm_storage_account.storageaccount[each.value.storage_account_name].name
  container_access_type = each.value.access_type
}

关键说明 #

• 变量重构后，每个存储账户的配置和容器列表一一绑定，逻辑清晰且易于维护。
• 用for_each替代count，能避免因列表顺序变化导致的资源重建问题，同时通过唯一键确保容器资源的唯一性。
• 容器资源通过azurerm_storage_account.storageaccount[each.value.storage_account_name]关联对应存储账户，保证容器归属正确。

内容的提问来源于stack exchange，提问作者Uday Kiran