属性的不适当值“ security_groups”：element 0：需要字符串

Question

我不确定为什么要获得这个价值。

我在 bastion/main.tf 中拥有此资源。

resource "aws_security_group" "bastion_sg" {
  name   = "${var.name}-bastion-security-group"
  vpc_id = var.vpc_id

  ingress {
    protocol    = "tcp"
    from_port   = 22
    to_port     = 22
    cidr_blocks = ["0.0.0.0/0"]
  }

  egress {
    protocol    = -1
    from_port   = 0
    to_port     = 0
    cidr_blocks = ["0.0.0.0/0"]
  }

  tags = {
    Name = "${var.name}-bastion-sg"
  }
}

这是我的输出 bastion/outputs.tf

output "bastion_sg_id" {
  value = aws_security_group.bastion_sg
}

我的EKS模块 main.tf

module "eks" {
  source = "./eks"
  name   = var.name
  key_name = module.bastion.key_name
  bastion_sg = module.bastion.bastion_sg_id
  vpc_id = module.networking.vpc_id
  private_subnets = module.networking.vpc_private_subnets
}

我的变量在我的 eks/variables.tf

variable "bastion_sg" {
  description = "bastion sg to add to ingress rule of node sg"
}

最后，我的 eks/main.tf 在发生错误的

esource "aws_security_group" "node-sg" {
  name   = "${var.name}-node-security-group"
  vpc_id = var.vpc_id

  ingress {
    protocol        = "tcp"
    from_port       = 22
    to_port         = 22
    security_groups = [var.bastion_sg]
  }

  egress {
    protocol    = -1
    from_port   = 0
    to_port     = 0
    cidr_blocks = ["0.0.0.0/0"]
  }
}

情况[] for Security_groups参数，当我这样做时，我没有得到所需的字符串错误，当我添加[]时，我得到了这个错误

on eks\main.tf line 95, in resource "aws_security_group" "node-sg":
│   95:     security_groups = [var.bastion_sg]
│     ├────────────────
│     │ var.bastion_sg is object with 13 attributes
│
│ Inappropriate value for attribute "security_groups": element 0: string required.

Answer 1

应该是：

output "bastion_sg_id" {
  value = aws_security_group.bastion_sg.id
}