使用Terraform运行脚本

Question

出于学习目的，我正在尝试在GCP上安装和设置我自己的Kubernetes集群。

我想在GCP上为我的实例提供一个引导脚本。

这是我的google\u compute\u实例config

json prettyprint-override">resource "google_compute_instance" "default" {
    name = var.vm_name
    machine_type = "f1-micro"
    zone = "europe-west1-b"

    boot_disk {
        initialize_params {
            image = "debian-cloud/debian-9"
        }
    }

    network_interface {
        network = var.network
        access_config {
            // Include this section to give the VM an external IP address
        }
    }

    provisioner "remote-exec" {
        script = var.script_path
        connection {
            type        = "ssh"
            host        = var.ip_address
            user        = "root"
        }
    }

    tags = ["node"]
}

我在应用terraform时遇到了这个问题

错误：无法打开脚本“sudo apt get update”

sudo apt-get安装
apt-transverage-https
ca-证书
curl
gnupg-Agent
software-Properties tions-公共
zsh
vim

curl-fsSLhttps://download.docker.com/linux/debian/gpg| sudo apt key add-sudo add apt repository \“deb[arch=amd64]https://download.docker.com/linux/debian\$（lsb_release-cs）\
稳定的“sudo-apt-get-update”

卷曲-shttps://packages.cloud.google.com/apt/doc/apt-key.gpg| sudo apt按键添加-cat

sudo apt-get安装
apt-transverage-https
ca-证书
curl
gnupg-Agent
software-Properties tions-公共
zsh
vim

curl-fsSLhttps://download.docker.com/linux/debian/gpg| sudo apt key add-sudo add apt repository \“deb[arch=amd64]https://download.docker.com/linux/debian\$（lsb_release-cs）\
稳定的“sudo-apt-get-update”

卷曲-shttps://packages.cloud.google.com/apt/doc/apt-key.gpg| sudo apt按键添加-cat

我所有的实例都是在云上创建的，它似乎找到了引导脚本，但它显示了这个错误。

我错过了什么？有更好的方法吗？

下面是脚本：

#bin/bash

sudo apt-get update

sudo apt-get install \
    apt-transport-https \
    ca-certificates \
    curl \
    gnupg-agent \
    software-properties-common \
    zsh \
    vim

curl -fsSL https://download.docker.com/linux/debian/gpg | sudo apt-key add -
sudo add-apt-repository \
   "deb [arch=amd64] https://download.docker.com/linux/debian \
   $(lsb_release -cs) \
   stable"
sudo apt-get update && sudo apt-get install docker-ce docker-ce-cli containerd.io

curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key add -
cat <<EOF | sudo tee /etc/apt/sources.list.d/kubernetes.list
deb https://apt.kubernetes.io/ kubernetes-xenial main
EOF
sudo apt-get update
sudo apt-get install -y kubelet kubeadm kubectl
sudo apt-mark hold kubelet kubeadm kubectl

Answer 1

对于那些感兴趣的人，我找到了一个更简单的解决方案，不使用ssh，而是使用创建资源时可用的google元数据。

metadata\u startup\u script=file（“./scripts/bootstrap.sh”）

json prettyprint-override">resource "google_compute_instance" "default" {
    name = var.vm_name
    machine_type = "e2-standard-2"
    zone = "europe-west1-b"

    boot_disk {
        initialize_params {
            image = "debian-cloud/debian-9"
        }
    }

    network_interface {
        network = var.network
        access_config {
            // Include this section to give the VM an external IP address
        }
    }

    metadata_startup_script = file("./scripts/bootstrap.sh")

    tags = ["node"]
}

Answer 2

您应该在远程执行的连接块中提供私钥参数。

private_key - The contents of an SSH key to use for the connection. These can be loaded from a file on disk using the file function. This takes preference over the password if provided.

示例块可以是这样的：

  provisioner "remote-exec" {
        script = var.script_path
        connection {
            host     = var.ip_address
            type     = "ssh"      
            user     = "root"
            private_key = fileexists("/temp/private_key") ? file("/temp/private_key") : file("C:/private_key")             
        }
  }