Terraform 使用共享映像库的多租户部署

我正在尝试在租户2中创建一个VM，租户1中提供共享映像厨房

下面是我正在使用的代码

租户-2 租户-1 获取SIG资源的提供程序

provider "azurerm" {

  alias           = "sig-resources-id"

  subscription_id = "${var.sig_subscription_id}"

  client_id       = "${var.sig_client_id}"

  client_secret   = "${var.sig_client_secret}"

  tenant_id       = "${var.sig_tenant_id}"

}

从Tenant-1获取映像ID，并在azurerm_虚拟机中使用它在Tenant-2中创建VM

错误：compute.VirtualMachinesClient#CreateOrUpdate:发送请求失败：StatusCode=403--原始错误：code=“LinkedAuthorizationFailed”消息=“客户端有权执行操作‘Microsoft.Compute/galleries/images/versions/read'on scope’/subscriptions/subscription-ID-of-tenant-2/resourceGroups/mygroup/providers/Microsoft.Compute/virtualMachines/sigvm-01’，但当前租户“”无权访问链接订阅“”。”

---

非常感谢您的帮助。

这里似乎已经解决了这个问题

根据修复程序，请将以下属性

辅助\u租户\u id=[“”]

添加到租户-1

provider "azurerm" {

  subscription_id = "${var.subscription_id}"

  client_id       = "${var.client_id}"

  client_secret   = "${var.client_secret}"

  tenant_id       = "${var.tenant_id}"

  auxiliary_tenant_ids = ["${var.sig_tenant_id}"]
}

希望这有帮助

provider "azurerm" {

  subscription_id = "${var.subscription_id}"

  client_id       = "${var.client_id}"

  client_secret   = "${var.client_secret}"

  tenant_id       = "${var.tenant_id}"

  auxiliary_tenant_ids = ["${var.sig_tenant_id}"]
}