Terraform aws：[警告] 可重试错误：拨号 tcp：在 127.0.0.53:53 上查找 self.public_ip：没有这样的主机

Question

问题：

大家好，

谢谢你的时间。 所以我是 Terraform 和 DevOps 的新手。 我觉得我在供应商连接块下做错了什么。 我正在尝试使用 terraform 创建 ansible 主从配置。 为了让我的主节点能够与从节点通信，需要主节点的 ssh 公钥在 .ssh/authorized 中的所有从节点中可用，为此我正在尝试 ssh 并在创建时传递主公钥奴隶。 出于某种原因，我无法在创建时通过 ssh 进入奴隶，我尝试了所有我能想象的方法并浏览了很多论坛。 我确定我可能在这里做错了什么。 任何帮助，将不胜感激。 问候。

地形版

Terraform v0.13.0

Terraform 配置文件

variable "region" {
  default = "us-east-1"
}

variable "type" {
  default = "t2.micro"  
}

variable "ec2LinuxAmi" {
  type = map(string)
  default = {
    us-east-1 = "ami-0bcc094591f354be2"
  }  
}

variable "keyname" {
  default = "terraformKeys"  
}

variable "privateKeyPath" {
  description = "Path to private key"
  default = "/home/userName/.ssh/id_rsa"
}

variable "awsKey" {
  default = "terraformKeys.pem"
}

variable "user_names" {
  description = "Create IAM users with these names"
  type        = list(string)
  default     = ["ansibleMaster"]
}


provider "aws" {
  region = var.region
  shared_credentials_file = "/home/userName/.aws/credentials"
  profile = "default"
}

resource "aws_security_group" "port_22_ingress_globally_accessible" {
    name = "port_22_ingress_globally_accessible"

    ingress { 
        from_port = 22    
        to_port = 22
        protocol = "tcp"
        cidr_blocks = ["0.0.0.0/0"]
    }
}

resource "aws_instance" "linux"{
  count = length(var.user_names)
  ami = lookup(var.ec2LinuxAmi, var.region)
  instance_type = var.type
  security_groups = [ "port_22_ingress_globally_accessible" ]
  key_name = var.keyname

  tags = {
    Name = var.user_names[count.index]
}

  provisioner "file" {
    source      = "foo"
    destination = "/tmp/foo"
  }
    connection {
      type = "ssh"
      user = "ubuntu"
      host = "self.public_ip"
      port = 22
      private_key = "${file("/home/userName/.ssh/id_rsa")}"
  }
}

调试输出

2020/08/30 19:10:30 [WARN] Provider "registry.terraform.io/hashicorp/aws" produced an unexpected new value for aws_instance.linux[0], but we are tolerating it because it is using the legacy plugin SDK.
The following problems may be the cause of any confusing errors from downstream operations:
- .disable_api_termination: was null, but now cty.False
- .ebs_optimized: was null, but now cty.False
- .hibernation: was null, but now cty.False
- .monitoring: was null, but now cty.False
- .iam_instance_profile: was null, but now cty.StringVal("")
- .credit_specification: block count changed from 0 to 1
2020/08/30 19:10:30 [TRACE] eval: *terraform.EvalMaybeTainted
2020/08/30 19:10:30 [TRACE] eval: *terraform.EvalWriteState
2020/08/30 19:10:30 [TRACE] EvalWriteState: recording 0 dependencies for aws_instance.linux[0]
2020/08/30 19:10:30 [TRACE] EvalWriteState: writing current state object for aws_instance.linux[0]
2020/08/30 19:10:30 [TRACE] eval: *terraform.EvalApplyProvisioners
2020/08/30 19:10:30 [TRACE] EvalApplyProvisioners: provisioning aws_instance.linux[0] with "file"
aws_instance.linux[0]: Provisioning with 'file'...
2020-08-30T19:10:30.228-0400 [DEBUG] plugin.terraform: file-provisioner (internal) 2020/08/30 19:10:30 using private key for authentication
2020-08-30T19:10:30.229-0400 [DEBUG] plugin.terraform: file-provisioner (internal) 2020/08/30 19:10:30 [DEBUG] Connecting to self.public_ip:22 for SSH
2020-08-30T19:10:30.248-0400 [DEBUG] plugin.terraform: file-provisioner (internal) 2020/08/30 19:10:30 [ERROR] connection error: dial tcp: lookup self.public_ip on 127.0.0.53:53: no such host

调试结束：

"Error: timeout - last error: SSH authentication failed
(ubuntu@18.204.3.15:22): ssh: handshake failed: ssh: unable to
authenticate, attempted methods [none publickey], no supported methods
remain". 

Answer 1

您的主机将只是一个字符串“self.public_ip”：

host = "self.public_ip"

它应该是：

host = self.public_ip

connection应该在provisioner块内：

  provisioner "file" {
    source      = "foo"
    destination = "/tmp/foo"

    connection {
      type = "ssh"
      user = "ubuntu"
      host = self.public_ip
      port = 22
      private_key = "${file("/home/userName/.ssh/id_rsa")}"
    }
  }

最后，未创建aws_key_pair资源。 但也许它被排除在问题之外。