Azure ARM模板中先检查虚拟网络存在性再部署VM的方法

嘿，这个需求在ARM模板部署里挺常见的，我来给你梳理下最规范的实现方式——核心是利用ARM的内置函数和部署条件来做前置检查，分两种常用场景给你演示：

场景1：VNET不存在时跳过VM部署 #

如果希望VNET不存在时，自动跳过VM及相关依赖资源（比如网卡）的部署，而不是直接报错，可以用resourceExists()函数结合资源的condition属性来实现。

第一步：定义必要参数 #

先把可变的配置抽成参数，方便后续复用：

"parameters": {
  "vmName": {
    "type": "string",
    "defaultValue": "Server01"
  },
  "vnetResourceGroupName": {
    "type": "string",
    "defaultValue": "RESOURCEGROUP01"
  },
  "vnetName": {
    "type": "string",
    "defaultValue": "VNET1"
  },
  "subnetName": {
    "type": "string",
    "defaultValue": "default"
  },
  "adminUsername": {
    "type": "string"
  },
  "adminPassword": {
    "type": "securestring"
  },
  "vmSize": {
    "type": "string",
    "defaultValue": "Standard_D2s_v3"
  }
}

第二步：添加条件判断控制资源部署 #

在网卡和VM的资源定义中，通过condition属性判断VNET是否存在，只有存在时才部署：

"resources": [
  // 网卡资源，依赖VNET存在
  {
    "type": "Microsoft.Network/networkInterfaces",
    "apiVersion": "2023-05-01",
    "name": "[concat(parameters('vmName'), '-nic')]",
    "condition": "[resourceExists(resourceId(parameters('vnetResourceGroupName'), 'Microsoft.Network/virtualNetworks', parameters('vnetName')))]",
    "properties": {
      "ipConfigurations": [
        {
          "name": "ipconfig1",
          "properties": {
            "privateIPAllocationMethod": "Dynamic",
            "subnet": {
              "id": "[resourceId(parameters('vnetResourceGroupName'), 'Microsoft.Network/virtualNetworks/subnets', parameters('vnetName'), parameters('subnetName'))]"
            }
          }
        }
      ]
    }
  },
  // VM资源，依赖网卡且仅在VNET存在时部署
  {
    "type": "Microsoft.Compute/virtualMachines",
    "apiVersion": "2023-07-01",
    "name": "[parameters('vmName')]",
    "condition": "[resourceExists(resourceId(parameters('vnetResourceGroupName'), 'Microsoft.Network/virtualNetworks', parameters('vnetName')))]",
    "dependsOn": [
      "[resourceId('Microsoft.Network/networkInterfaces', concat(parameters('vmName'), '-nic'))]"
    ],
    "properties": {
      "hardwareProfile": {
        "vmSize": "[parameters('vmSize')]"
      },
      "osProfile": {
        "computerName": "[parameters('vmName')]",
        "adminUsername": "[parameters('adminUsername')]",
        "adminPassword": "[parameters('adminPassword')]"
      },
      "storageProfile": {
        "imageReference": {
          "publisher": "MicrosoftWindowsServer",
          "offer": "WindowsServer",
          "sku": "2022-Datacenter",
          "version": "latest"
        },
        "osDisk": {
          "createOption": "FromImage"
        }
      },
      "networkProfile": {
        "networkInterfaces": [
          {
            "id": "[resourceId('Microsoft.Network/networkInterfaces', concat(parameters('vmName'), '-nic'))]"
          }
        ]
      }
    }
  }
]

场景2：VNET不存在时直接终止部署并报错 #

如果要求VNET必须存在才能继续部署，不存在时直接抛出明确错误终止流程，可以用assert()函数结合嵌套部署来做前置验证：

"resources": [
  // 前置验证步骤：检查VNET是否存在，不存在则抛出错误
  {
    "type": "Microsoft.Resources/deployments",
    "apiVersion": "2021-04-01",
    "name": "validateVnetExists",
    "properties": {
      "mode": "Incremental",
      "template": {
        "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
        "contentVersion": "1.0.0.0",
        "resources": [],
        "outputs": {
          "vnetValidationResult": {
            "type": "bool",
            "value": "[assert(resourceExists(resourceId(parameters('vnetResourceGroupName'), 'Microsoft.Network/virtualNetworks', parameters('vnetName'))), concat('错误：虚拟网络 ', parameters('vnetName'), ' 在资源组 ', parameters('vnetResourceGroupName'), ' 中不存在，部署无法继续。'))]"
          }
        }
      }
    }
  },
  // 网卡资源，依赖验证步骤完成
  {
    "type": "Microsoft.Network/networkInterfaces",
    "apiVersion": "2023-05-01",
    "name": "[concat(parameters('vmName'), '-nic')]",
    "dependsOn": [
      "[resourceId('Microsoft.Resources/deployments', 'validateVnetExists')]"
    ],
    "properties": {
      // 同场景1的网卡配置
    }
  },
  // VM资源，依赖网卡和验证步骤
  {
    "type": "Microsoft.Compute/virtualMachines",
    "apiVersion": "2023-07-01",
    "name": "[parameters('vmName')]",
    "dependsOn": [
      "[resourceId('Microsoft.Network/networkInterfaces', concat(parameters('vmName'), '-nic'))]",
      "[resourceId('Microsoft.Resources/deployments', 'validateVnetExists')]"
    ],
    "properties": {
      // 同场景1的VM配置
    }
  }
]

关键注意事项 #

• 权限要求：执行部署的账号必须拥有目标VNET所在资源组的Microsoft.Network/virtualNetworks/read权限，否则resourceExists()会误判为VNET不存在。
• 子网检查（可选）：如果需要同时验证子网存在，可以把resourceExists()的参数改成子网的资源ID：resourceId(parameters('vnetResourceGroupName'), 'Microsoft.Network/virtualNetworks/subnets', parameters('vnetName'), parameters('subnetName'))
• API版本兼容性：确保使用的资源API版本支持resourceExists()和assert()函数（一般2019-04-01及以后的模板版本都支持）。

内容的提问来源于stack exchange，提问作者itye1970