如何从 Bicep AKS 配置中引用模块中创建的子网

huangapple
go评论84阅读模式
英文:

How can I refer to a subnet created in a module from a bicep AKS configuration

问题

我正在尝试创建一个 Azure Kubernetes 服务 (Azure Kubernetes Service) 集群并将其连接到现有的虚拟网络。我需要使用 CNI 网络，因此需要一个预定义的子网。这个子网位于不同的资源组中。

我的解决方案是使用一个模块来创建子网，然后将其加载为现有资源：

  1. @description('拥有虚拟网络的资源组')
  2. param vnetRG string
  4. @description('将拥有子网的虚拟网络')
  5. param vNet string
  7. param location string = resourceGroup().location
  9. param otherParameter string
  11. param sshPubKey string
  13. module subnet 'subnet.bicep' = {
  14.   name: '${deployment().name}-subnet'
  15.   scope: resourceGroup(vnetRG)
  16.   params: {
  17.     virtualNetworkName: vNet
  18.   }
  19. }
  21. resource subnetFromModule 'Microsoft.Network/virtualNetworks/subnets@2022-07-01' existing = {
  22.   name: subnet.outputs.subnetName
  23.   scope: resourceGroup(vnetRG)
  24. }
  26. // Azure Kubernetes Service 集群
  27. resource aks 'Microsoft.ContainerService/managedClusters@2022-05-02-preview' = {
  28.   name: otherParameter
  29.   location: location
  30.   identity: {
  31.     type: 'SystemAssigned'
  32.   }
  33.   properties: {
  34.     dnsPrefix: 'dummy'
  35.     publicNetworkAccess: 'Enabled'
  36.     networkProfile: {
  37.       networkPlugin: 'azure'
  38.     }
  39.     agentPoolProfiles: [
  40.       {
  41.         name: 'lnxnod'
  42.         osDiskSizeGB: 60
  43.         count: 3
  44.         vmSize: 'Standard_D2s_v3'
  45.         osType: 'Linux'
  46.         mode: 'System'
  47.         vnetSubnetID: subnetFromModule.id
  48.       }
  49.     ]
  50.     linuxProfile: {
  51.       adminUsername: otherParameter
  52.       ssh: {
  53.         publicKeys: [
  54.           {
  55.             keyData: sshPubKey
  56.           }
  57.         ]
  58.       }
  59.     }
  60.   }
  61. }
  63. output subnetId string = subnetFromModule.id

但尝试应用此模板导致错误：InvalidTemplateDeploymentError - 在资源组 testclusterthing 中为容器服务 lsdkf 的部署提供资源失败。消息：在资源组 GLRclusterRG 中为容器服务 lsdkf 的部署提供资源失败。消息：部署模板验证失败：'vnetRG' 模板参数未找到。请参阅 https://aka.ms/arm-syntax-parameters 以获取使用详细信息。. 详细信息:。我做错了什么？

英文:

I am trying to create an Azure Kubernetes Service cluster to an existing virtual network. I need to use CNI networking, so I need a predefined subnet. The subnet is in a different resource group.

My solution was to use a module to create the subnet, then load it as an existing resource:

  1. @description('Resource group with the vNet')
  2. param vnetRG string
  4. @description('The vNet that will have the subnet')
  5. param vNet string
  7. param location string = resourceGroup().location
  9. param otherParameter string
  11. param sshPubKey string
  13. module subnet 'subnet.bicep' = {
  14.   name: '${deployment().name}-subnet'
  15.   scope: resourceGroup( vnetRG )
  16.   params: {
  17.     virtualNetworkName: vNet
  18.   }
  19. }
  21. resource subnetFromModule 'Microsoft.Network/virtualNetworks/subnets@2022-07-01' existing = {
  22.   name: subnet.outputs.subnetName
  23.   scope: resourceGroup( vnetRG )
  24. }
  26. // The Azure Kubernetes Service cluster.
  27. resource aks 'Microsoft.ContainerService/managedClusters@2022-05-02-preview' = {
  28.   name: otherParameter
  29.   location: location
  30.   identity: {
  31.     type: 'SystemAssigned'
  32.   }
  33.   properties: {
  34.     dnsPrefix: 'dummy'
  35.     publicNetworkAccess: 'Enabled'
  36.     networkProfile: {
  37.       networkPlugin: 'azure'
  38.     }
  39.     agentPoolProfiles: [
  40.       {
  41.         name: 'lnxnod'
  42.         osDiskSizeGB: 60
  43.         count: 3
  44.         vmSize: 'Standard_D2s_v3'
  45.         osType: 'Linux'
  46.         mode: 'System'
  47.         vnetSubnetID: subnetFromModule.id
  48.       }
  49.     ]
  50.     linuxProfile: {
  51.       adminUsername: otherParameter
  52.       ssh: {
  53.         publicKeys: [
  54.           {
  55.             keyData: sshPubKey
  56.           }
  57.         ]
  58.       }
  59.     }
  60.   }
  61. }
  63. output subnetId string = subnetFromModule.id

But trying to apply this template resulted in the error: InvalidTemplateDeploymentError - Provisioning of resource(s) for container service lsdkf in resource group testclusterthing failed. Message: Provisioning of resource(s) for container service lsdkf in resource group GLRclusterRG failed. Message: Deployment template validation failed: 'The template parameter 'vnetRG' is not found. Please see https://aka.ms/arm-syntax-parameters for usage details.'.. Details: . Details:. What am I doing wrong?

答案1

得分: 0

我找到了问题。一开始，我以为错误是来自于模块声明，因为在那里用字面值替换参数可以解决问题。但后来我尝试删除模块引用后面的所有内容，这也解决了问题。最后，我成功地将问题定位到了agentPoolProfiles中的vnetSubnetID: subnetFromModule.id。由于某种原因，在这里引用模块创建的现有资源失败了。

我通过不使用existing加载子网资源来解决了这个问题。相反，我将所有相关的元数据作为模块的output返回：

  1. @description('带有 vNet 的资源组')
  2. param vnetRG string
  4. @description('将拥有子网的 vNet')
  5. param vNet string
  7. param location string = resourceGroup().location
  9. param otherParameter string
  11. param sshPubKey string
  13. module subnet 'subnet.bicep' = {
  14.   name: '${deployment().name}-subnet'
  15.   scope: resourceGroup(vnetRG)
  16.   params: {
  17.     virtualNetworkName: vNet
  18.   }
  19. }
  21. // Azure Kubernetes Service 集群。
  22. resource aks 'Microsoft.ContainerService/managedClusters@2022-05-02-preview' = {
  23.   name: otherParameter
  24.   location: location
  25.   identity: {
  26.     type: 'SystemAssigned'
  27.   }
  28.   properties: {
  29.     dnsPrefix: 'dummy'
  30.     publicNetworkAccess: 'Enabled'
  31.     networkProfile: {
  32.       networkPlugin: 'azure'
  33.     }
  34.     agentPoolProfiles: [
  35.       {
  36.         name: 'lnxnod'
  37.         osDiskSizeGB: 60
  38.         count: 3
  39.         vmSize: 'Standard_D2s_v3'
  40.         osType: 'Linux'
  41.         mode: 'System'
  42.         vnetSubnetID: subnet.outputs.subnetId
  43.       }
  44.     ]
  45.     linuxProfile: {
  46.       adminUsername: otherParameter
  47.       ssh: {
  48.         publicKeys: [
  49.           {
  50.             keyData: sshPubKey
  51.           }
  52.         ]
  53.       }
  54.     }
  55.   }
  56. }
  58. output subnetId string = subnet.outputs.subnetId
英文:

I figured out the problem. At first I thought the error was coming from the module declaration, because replacing the parameter with a literal value there fixed the problem. But then I tried deleting everything after the module reference, and that fixed the issue as well. I was finally able to pin down the issue to vnetSubnetID: subnetFromModule.id in agentPoolProfiles. For some reason a reference to the existing resource created by the module failed here.

I worked around the issue by not using existing to load the subnet resource. Instead I just returned all the relevant metadata as outputs from the module:

  1. @description('Resource group with the vNet')
  2. param vnetRG string
  4. @description('The vNet that will have the subnet')
  5. param vNet string
  7. param location string = resourceGroup().location
  9. param otherParameter string
  11. param sshPubKey string
  13. module subnet 'subnet.bicep' = {
  14.   name: '${deployment().name}-subnet'
  15.   scope: resourceGroup( vnetRG )
  16.   params: {
  17.     virtualNetworkName: vNet
  18.   }
  19. }
  21. // The Azure Kubernetes Service cluster.
  22. resource aks 'Microsoft.ContainerService/managedClusters@2022-05-02-preview' = {
  23.   name: otherParameter
  24.   location: location
  25.   identity: {
  26.     type: 'SystemAssigned'
  27.   }
  28.   properties: {
  29.     dnsPrefix: 'dummy'
  30.     publicNetworkAccess: 'Enabled'
  31.     networkProfile: {
  32.       networkPlugin: 'azure'
  33.     }
  34.     agentPoolProfiles: [
  35.       {
  36.         name: 'lnxnod'
  37.         osDiskSizeGB: 60
  38.         count: 3
  39.         vmSize: 'Standard_D2s_v3'
  40.         osType: 'Linux'
  41.         mode: 'System'
  42.         vnetSubnetID: subnet.outputs.subnetId
  43.       }
  44.     ]
  45.     linuxProfile: {
  46.       adminUsername: otherParameter
  47.       ssh: {
  48.         publicKeys: [
  49.           {
  50.             keyData: sshPubKey
  51.           }
  52.         ]
  53.       }
  54.     }
  55.   }
  56. }
  58. output subnetId string = subnet.outputs.subnetId

huangapple
  • 本文由 发表于 2023年2月23日 22:33:16
  • 转载请务必保留本文链接：https://go.coder-hub.com/75546237.html
  • azure-aks
  • azure-bicep
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定