为了在ACR公开可用或仅对选定网络可用时在网络之间切换，我们需要为network_rule_set保留一个条件。详细代码如下。
通过允许所有网络x1c 0d1x创建ACR

Step1：这里是我添加的最新代码****main.tf文件如下：

provider  "azurerm" {
    features {}
    }
    resource  "azurerm_container_registry"  "acr_name" {
    name  =  "acrswarna"
    resource_group_name  =  var.resource_group_name
    location  =  var.location
    sku  =  var.sku
    admin_enabled  =  var.admin_enabled
    // Disable this code block for allowed ip network - Begin
    network_rule_set {
    default_action  =  "Allow"
    }
    // Disable this code block for allowed ip network - End
    dynamic  "network_rule_set" {
    for_each =  (length(var.allowed_ips) != 0 || length(var.allowed_subnet_ids) != 0) ? [1] : []
    content {
    default_action =  "Deny"
    dynamic  "virtual_network" {
    for_each = var.allowed_subnet_ids
    content {
    action =  "Allow"
    subnet_id =  virtual_network.value
    }
    }
    dynamic  "ip_rule" {
    for_each = var.allowed_ips
    content {
    action =  "Allow"
    ip_range =  ip_rule.value
    }}}}}

变量tf文件为

variable "allowed_subnet_ids" {
  type        = list(string)
  description = "List of subnet IDs to be allowed to access the ACR"
}

variable "allowed_ips" {
  type        = list(string)
  description = "White list IP addresses"
}

variable "public_network_access_enabled"{
  type = bool
  description = "(Optional) Whether public network access is allowed for the container registry. Defaults to true."
} 
variable "admin_enabled"{
  type = bool
  description = "(Optional) Whether public network access is allowed for the container registry. Defaults to true."
}
variable "sku" {
  type        = string
  description = "SKU"
}
variable "resource_group_name" {
  type        = string
  description = "resource_group_name"
}
variable "location" {
  type        = string
  description = "location"
}

地形.tfvar文件代码

env                  = "sdbx"
    application_id       = "appid"
    resource_group_name  = "rg-swarna"
    role = "public"
    location = "westeurope"
    //Disable/ Enable the allowed ips when ever need if it was empty All Network will allow and if any ips its allowed only required range
    //allowed_ips = ["84.1.2.3", "51.3.4.2"] 
    allowed_ips = []
    allowed_subnet_ids = []
    admin_enabled = true
    sku="Premium"
    public_network_access_enabled = true

步骤2：执行下列命令

terraform plan -var-file .\terraform.tfvars
   terraform apply -var-file .\terraform.tfvars -auto-approve

第3步：在Azure门户上应用Terraform后，我们可以看到ACR，

第4步：使用选定的IP范围更新代码并重新运行terraform代码要在上完成的更改替换terraform.tfvars中的以下代码

//Disable/ Enable the allowed ips when ever need if it was empty All Network will allow and if any ips its allowed only required range
allowed_ips = ["84.1.2.3", "51.3.4.2"]
//allowed_ips  =  []

主tf文件-替换以下代码

# // Disable this code block  for allowed ip network - Begin
#  network_rule_set {
#   default_action = "Allow"
#  }
#  // Disable this code block  for allowed ip network - End

重复步骤2以下是实施后门户网站的输出。使用选定的IP范围

回滚过程将所有网络保留为默认值，并在门户上删除以上IP范围

要在上完成的更改替换terraform.tfvars中的以下代码

//Disable/ Enable the allowed ips when ever need if it was empty All Network will allow and if any ips its allowed only required range
//allowed_ips = ["84.1.2.3", "51.3.4.2"]
allowed_ips  =  []

main.tf文件-替换以下代码

// Disable this code block  for allowed ip network - Begin
 network_rule_set {
  default_action = "Allow"
 }
// Disable this code block  for allowed ip network - End

重复步骤2
输出

Terraform应用后，您可以看到所有网络的流量路由，并删除门户上的相应IP地址。