Terraform - 如何修改 Terraform 中的地图对象?

Terraform - How to modify the map object in Terraform?

我有一张地图格式:

datasets   = {
  test = {
    access = [
      {
        role = "OWNER"
        group_by_email = "grp-owner"
      },
      {
        role = "READER"
        group_by_email = "grp-reader"
      }
    ]
  }
  test2 = {
    access = [
      {
        role = "OWNER"
        group_by_email = "grp-owner"
      },
      {
        role = "WRITER"
        group_by_email = "grp-writer"
      }
    ]
  }
}

我正在寻找更新地图(数据集/{dataset_name}/access/group_by_email)以添加域名的方法:

datasets   = {
  test = {
    access = [
      {
        role = "OWNER"
        group_by_email = "grp-owner@test.com"
      },
      {
        role = "READER"
        group_by_email = "grp-reader@test.com"
      }
    ]
  }
  test2 = {
    access = [
      {
        role = "OWNER"
        group_by_email = "grp-owner@test.com"
      },
      {
        role = "WRITER"
        group_by_email = "grp-writer@test.com"
      }
    ]
  }
}

您可以按如下方式进行:


variable "datasets" {
  default   = {
    test = {
      access = [
        {
          role = "OWNER"
          group_by_email = "grp-owner"
        },
        {
          role = "READER"
          group_by_email = "grp-reader"
        }
      ]
    }
    test2 = {
      access = [
        {
          role = "OWNER"
          group_by_email = "grp-owner"
        },
        {
          role = "WRITER"
          group_by_email = "grp-writer"
        }
      ]
    }
  }
}

locals {
  modified = { for k1, v1 in var.datasets:
                k1 => {access = [
                          for access in v1["access"]:  
                           merge(access, {group_by_email = "${access.group_by_email}@test.com"})
                         ]
                      }
             }
}

这导致:

 {
  "test" = {
    "access" = [
      {
        "group_by_email" = "grp-owner@test.com"
        "role" = "OWNER"
      },
      {
        "group_by_email" = "grp-reader@test.com"
        "role" = "READER"
      },
    ]
  }
  "test2" = {
    "access" = [
      {
        "group_by_email" = "grp-owner@test.com"
        "role" = "OWNER"
      },
      {
        "group_by_email" = "grp-writer@test.com"
        "role" = "WRITER"
      },
    ]
  }
}