如何使用Terraform在Azure键Vault中从SQL托管实例存储连接字符串

发布于 2025-01-26 12:39:04 字数 406 浏览 3 评论 0原文

我正在使用Terraform部署SQL托管实例，并且需要将其随附的4个连接字符串存储在Azure密钥库中。根据SQL托管实例的Terraform文档： noreferrer“ /最新/docs/resources/mssql_managed_instance 连接字符串不是导出的属性，因此不能仅仅执行输出并引用它。我将如何识别这些连接字符串将它们存储在钥匙库中？

如果Terraform不可能，我对Powershell/ARM解决方案开放

原文

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

妄断弥空 2025-02-02 12:39:04

通常，您可以使用Terraform这样的Terraform将任何秘密存储在钥匙库中：

resource "azurerm_key_vault_secret" "example" {
  name         = "the-secret-name"
  value        = "the-secret-value"
  key_vault_id = var.keyvault_id
}

每个连接字符串遵循某个语法，因此我将它们放在基于名称，管理员用户和管理员密码的字符串中，然后将它们添加到键库中，与此类似：

locals {
    username = "admin"
    password = "abc"
}

resource "azurerm_mssql_managed_instance" "example" {
  name                = "managedsqlinstance"
  resource_group_name = var.resource_group_name
  location            = var.location
  
  administrator_login          = local.username
  administrator_login_password = local.password
  ...
}
resource "azurerm_key_vault_secret" "example" {
  name         = "sql-connectionstring"
  value        = "Server=tcp:${azurerm_mssql_managed_instance.example.name}.database.windows.net,1433;Persist Security Info=False;User ID=${local.username};Password=${local.password};MultipleActiveResultSets=False;Encrypt=True;TrustServerCertificate=False;Connection Timeout=30;"
  key_vault_id = var.keyvault_id
}

要找到连接字符串及其确切的语法，您应该查看在Azure门户中创建的SQL托管实例。

In general, you can store any secret in a key vault using terraform like so:

resource "azurerm_key_vault_secret" "example" {
  name         = "the-secret-name"
  value        = "the-secret-value"
  key_vault_id = var.keyvault_id
}

Every connection string follows a certain syntax so I would put these together as strings based on the name, admin user and admin password, and add them to the key vault, similar to this:

locals {
    username = "admin"
    password = "abc"
}

resource "azurerm_mssql_managed_instance" "example" {
  name                = "managedsqlinstance"
  resource_group_name = var.resource_group_name
  location            = var.location
  
  administrator_login          = local.username
  administrator_login_password = local.password
  ...
}
resource "azurerm_key_vault_secret" "example" {
  name         = "sql-connectionstring"
  value        = "Server=tcp:${azurerm_mssql_managed_instance.example.name}.database.windows.net,1433;Persist Security Info=False;User ID=${local.username};Password=${local.password};MultipleActiveResultSets=False;Encrypt=True;TrustServerCertificate=False;Connection Timeout=30;"
  key_vault_id = var.keyvault_id
}

To find the connection strings and their exact syntax, you should have a look at the sql managed instance that has been created in the azure portal.

回复收藏 0 原文

~没有更多了~