Question

我目前有一个Terraform文件可以在AWS上创建EC2实例，如下所示：

resource "aws_instance" "influxdata" {
  count      = "${var.ec2-count-influx-data}"

  ami           = "${module.amis.rhel73_id}"
  instance_type = "${var.ec2-type-influx-data}"

  vpc_security_group_ids = ["${var.sg-ids}"]
  subnet_id              = "${element(module.infra.subnet,count.index)}"
  key_name               = "${var.KeyName}"
  iam_instance_profile   = "Custom-role"

  tags {
    Name               = "influx-data-node"
    ASV                = "${module.infra.ASV}"
    CMDBEnvironment    = "${module.infra.CMDBEnvironment}"
    OwnerContact       = "${module.infra.OwnerContact}"
    custodian_downtime = "off"
    OwnerEid           = "${var.OwnerEid}"
  }


  ebs_block_device {
    device_name = "/dev/sdg"
    volume_size = 500
    volume_type = "io1"
    iops = 2000
    encrypted = true
    delete_on_termination = true
  }

  user_data = "${file("terraform/attach_ebs.sh")}"

  connection {
    private_key = "${file("/Users/usr111/Downloads/usr111_CD.pem")}"
    user        = "ec2-user"
  }

  provisioner "remote-exec" {
    inline = ["echo just checking for ssh. ttyl. bye."]
  }

  provisioner "local-exec" {
    command = <<EOF
ansible-playbook base-data.yml --key-file=/Users/usr111/Downloads/usr111_CD.pem --user=ec2-user -b -i "${self.private_ip},"
    EOF
  }
}

resource "aws_route53_record" "influx-data-route" {

  count = "${var.ec2-count-influx-data}"
  zone_id = "${var.r53-zone}"
  name = "influx-data-0${count.index}"
  type = "A"
  ttl = "300"
  // matches up record N to instance N
  records = ["${element(aws_instance.influxdata.*.private_ip, count.index)}"]
}

resource "local_file" "inventory-meta" {
  filename = "inventory"

  content = <<-EOF
[meta]
${join("\n",aws_instance.influxmeta.*.private_ip)}

[data]
${join("\n",aws_instance.influxdata.*.private_ip)}
  EOF
}

我正在努力弄清楚的是在创建清单文件之后让这部分运行：

provisioner "local-exec" { command = <<EOF ansible-playbook base-data.yml --key-file=/Users/usr111/Downloads/usr111_CD.pem --user=ec2-user -b -i "${self.private_ip}," EOF }

现在我将IP传递给Ansible，但我想传入清单文件，该文件仅在Terraform提供所有实例后创建。

Answer 1

因为您使用的是AWS，所以您可以尝试使用Dynamic Inventory脚本，而您的配置文件可能如下所示：

provisioner "local-exec" {
   command = "ansible-playbook -i ec2.py playbook.yml --limit ${self.public_ip}" }

在你的剧本中，你需要等待SSH可用，因为Ansible正在建立连接，而不是Terraform。

- name: wait for ssh
  hosts: localhost
  gather_facts: no

  tasks:
    - local_action: wait_for port=22 host="{{ ip }}" search_regex=OpenSSH delay=10

所以命令应如下所示：

provisioner "local-exec" {
   command = "ansible-playbook -i ec2.py playbook.yml --limit ${self.public_ip}" --extra-vars 'ip=${self.public_ip}'}

您还可以使用＆＃34;文件配置器＆＃34;将您的剧本复制到主持人，安装ansible并使用＆＃34; remote-exec＆＃34;在本地运行剧本，但这样做了给你。

创建后在所有EC2实例上运行local-exec配置程序

1 个答案: