使用Providers跨多区域部署Terraform实例仅单区域生效问题排查

问题场景 #

尝试通过Terraform Providers在多区域部署相同EC2实例，但当前仅能在单个区域创建实例，现有代码结构及内容如下：

目录结构 #

.
|-- main.tf
`-- aws_instance
|   `-- main.tf
`-- versions.tf

各文件内容 #

main.tf

module "aws_instances" {
  source  = "./aws_instance"
  providers = {
    aws.east1 = aws.east1
    aws.east2 = aws.east2
  }
}

aws_instance/main.tf

resource "aws_instance" "webserver" {
  ami = "webserver-image"
  instance_type = "t2.micro"
  key_name = "EC2-keyPair-Name"
  associate_public_ip_address = true
  root_block_device {
    volume_type = "gp2"
    volume_size = "30"
    delete_on_termination = false
}

versions.tf

terraform {
  required_version = ">= 1.0.4"
  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = ">= 3.23.0"
      configuration_aliases = [aws.east1, aws.east2]
    }
  }
}

provider "aws" {
  region  = "us-east-1"
  alias   = "east1"
}

provider "aws" {
  region  = "us-east-2"
  alias   = "east2"
}

问题根源 #

核心问题有两点：

1. 资源未关联传入的多Provider：子模块aws_instance中的EC2实例资源未指定provider参数，默认只会匹配一个未别名的Provider（此处无默认Provider，实际会加载第一个别名Provider），导致仅在单个区域创建实例。
2. 资源仅定义单个实例：子模块仅声明了一个EC2实例，即便指定Provider，也只会对应一个区域，无法批量覆盖多个传入的Provider。

解决方案 #

方案1：显式为每个Provider创建实例（适合少量区域） #

修改aws_instance/main.tf，为每个传入的Provider别名单独创建实例：

# us-east-1区域实例（关联east1 Provider）
resource "aws_instance" "webserver_east1" {
  provider = aws.east1
  
  ami = "webserver-image"
  instance_type = "t2.micro"
  key_name = "EC2-keyPair-Name"
  associate_public_ip_address = true
  root_block_device {
    volume_type = "gp2"
    volume_size = 30
    delete_on_termination = false
  }
}

# us-east-2区域实例（关联east2 Provider）
resource "aws_instance" "webserver_east2" {
  provider = aws.east2
  
  ami = "webserver-image"
  instance_type = "t2.micro"
  key_name = "EC2-keyPair-Name"
  associate_public_ip_address = true
  root_block_device {
    volume_type = "gp2"
    volume_size = 30
    delete_on_termination = false
  }
}

方案2：用for_each遍历Provider（适合多区域批量部署） #

这种方式更灵活，无需硬编码每个区域：

根模块main.tf修改

module "aws_instances" {
  source  = "./aws_instance"
  
  # 传入区域与Provider的映射关系
  region_providers = {
    "us-east-1" = aws.east1
    "us-east-2" = aws.east2
  }
}

子模块aws_instance/main.tf修改

先定义变量接收映射，再动态创建实例：

variable "region_providers" {
  type = map(aws.provider)
}

# 遍历每个Provider，创建对应区域的实例
resource "aws_instance" "webserver" {
  for_each = var.region_providers
  provider = each.value
  
  ami = "webserver-image"
  instance_type = "t2.micro"
  key_name = "EC2-keyPair-Name"
  associate_public_ip_address = true
  root_block_device {
    volume_type = "gp2"
    volume_size = 30
    delete_on_termination = false
  }
}

额外注意事项 #

• volume_size应为数字类型，原代码的字符串"30"建议改为30，避免类型警告。
• 不同区域的AMI ID不通用，建议用aws_ami数据源动态获取对应区域的镜像，避免硬编码错误。

内容的提问来源于stack exchange，提问作者Albert