Terraform是一种开源工具，用于安全高效地预配和管理云基础结构。您可以使用Terraform管理内网DNS解析（PrivateZone）资源。本文为您演示如何通过Terraform创建一个内置权威域名（Zone）。
支持资源列表
支持Terraform编排和使用内网DNS解析（PrivateZone）的部分资源和数据源清单，请参见内网DNS解析（PrivateZone）资源和数据源。如果您还不了解Terraform，请参见了解阿里云Terraform。
资源类型 | 资源链接 | 说明 |
Resources | 解析器终端节点 | |
解析器转发规则 | ||
绑定或者解绑Rule与VPC列表两者之间的关系 | ||
跨账号VPC授权 | ||
Private Zone | ||
绑定或者解绑zone与VPC列表两者之间的关系 | ||
Prviate Zone的解析记录 | ||
Data Sources | 获取终端节点信息 | |
获取区域信息 | ||
获取转发规则信息 | ||
Private Zone状态 | ||
获取解析记录信息 | ||
获取Private Zone信息 |
操作步骤
步骤一：配置权限
执行Terraform模板需要RAM用户权限，我们需要创建一个RAM用户，并获取AccessKey，添加权限策略。该AccessKey会配置为Terraform工具的环境变量。Terraform模板会创建内置权威域名（Zone），您需要为RAM用户添加管理内网DNS解析（PrivateZone）资源的权限AliyunPvtzFullAccess。具体操作，请参见创建RAM用户及管理RAM用户的权限。
步骤二：安装Terraform
在本地安装和配置Terraform，请参见在本地安装和配置Terraform。
安装完成后，您可以打开命令行终端，输入
terraform version，看到返回版本信息表示已成功安装。如果您不想安装Terraform，可以使用阿里云提供的在线服务Cloud Shell，其中内置了Terraform的运行环境。
步骤三：编写模板
创建一个名为main.tf文件，填入以下内容，用于创建一个内置权威域名（Zone）。
resource "alicloud_pvtz_zone" "test" {
zone_name = "test.example.com"
proxy_pattern = "ZONE"
}更多关于alicloud_pvtz_zone资源类型的配置信息，请参见内网DNS解析（PrivateZone）资源和数据源。
步骤四：运行模板
有序初始化加载模块，包括Provider等模块。
terraform initshell@Alicloud:~$ terraform init Initializing the backend... Initializing provider plugins... - Checking for available provider plugins... - Downloading plugin for provider "alicloud" (hashicorp/alicloud) 1.227.1... The following providers do not have any version constraints in configuration, so the latest version was installed. To prevent automatic upgrades to new major versions that may contain breaking changes, it is recommended to add version = "..." constraints to the corresponding provider blocks in configuration, with the constraint strings suggested below. * provider.alicloud: version = "~> 1.227" Warning: registry.terraform.io: For users on Terraform 0.13 or greater, this provider has moved to aliyun/alicloud. Please update your source in required_providers. Terraform has been successfully initialized! You may now begin working with Terraform. Try running "terraform plan" to see any changes that are required for your infrastructure. All Terraform commands should now work. If you ever set or change modules or backend configuration for Terraform, rerun this command to reinitialize your working directory. If you forget, other验证模板语法是否正确。
terraform planshell@Alicloud:~$ terraform plan Refreshing Terraform state in-memory prior to plan... The refreshed state will be used to calculate this plan, but will not be persisted to local or remote state storage. ------------------------------------------------------------------------ An execution plan has been generated and is shown below. Resource actions are indicated with the following symbols: + create Terraform will perform the following actions: # alicloud_pvtz_zone.test will be created + resource "alicloud_pvtz_zone" "test" { + creation_time = (known after apply) + id = (known after apply) + is_ptr = (known after apply) + name = (known after apply) + proxy_pattern = "ZONE" + record_count = (known after apply) + resource_group_id = (known after apply) + update_time = (known after apply) + zone_name = "test.example.com" + user_info { + region_ids = (known after apply) + user_id = (known after apply) } } Plan: 1 to add, 0 to change, 0 to destroy. Note: You didn't specify an "-out" parameter to save this plan, so Terraform can't guarantee that exactly these actions will be performed if "terraform apply" is subsequently run.部署模板。
terraform apply本案例部署时的部分返回日志。
Plan: 1 to add, 0 to change, 0 to destroy. Do you want to perform these actions? Terraform will perform the actions described above. Only 'yes' will be accepted to approve. Enter a value: yes alicloud_pvtz_zone.test: Creating... alicloud_pvtz_zone.test: Creation complete after 1s [id=bbc559fc1239d5c06928xxx]输入yes即可真正变更资源。您可以通过
terraform destroy释放当前模板创建的资源。创建完成后，您可以通过OpenAPI、SDK或者在云备份控制台查看到创建的Zone。
在 PrivateZone 域名管理页面的域名列表中，可以看到已创建的 Zone
test.example.com，域名类型为普通区，记录数为 0，域名生效范围为未设置。