nunop's questions

The module root has no resources在污点上出现错误。我试图污染几个null_resources。这是代码块null_resource.provision_first：

resource "null_resource" "provision_first" {

    connection {

        user = "root"
        type = "ssh"
        private_key = "${file("./.ssh/prv_key")}"
        host = "${element(digitalocean_droplet.droplet.*.ipv4_address, count.index)}"
        timeout = "2m"
   }

   provisioner "remote-exec" {
       inline = [

           # install salt-minion
           "wget -O - http://bootstrap.saltstack.org | sudo sh"
       ]
    }

    provisioner "file" {

         # copy minion file
        source = "../salt/prod/minion"
        destination = "/etc/salt/minion"
    }

   provisioner "file" {

       # copy top.sls and init.sls files
       source = "../salt/roots"
       destination = "/etc/salt/roots"
   }

   provisioner "remote-exec" {
       inline = [

          # tell salt-minion to look for the state tree in
          # the local file system, with the --local flag.
         "salt-call --local state.highstate -l debug"
       ]
   }

}

这是代码块null_resource.provision_last：

resource "null_resource" "provision_last" {
    connection {
        user = "root"
        type = "ssh"
        private_key = "${file("./.ssh/prv_key")}"
        host = "${element(digitalocean_droplet.droplet.*.ipv4_address, count.index)}"
        timeout = "2m"
    }

   provisioner "file" {
       source = "../site/index.html"
       destination = "/usr/nginx/html/site/index.html"
   }

   provisioner "file" {
       source = "../site/assets"
       destination = "/usr/nginx/site"
   }

  provisioner "remote-exec" {
      inline = [
          "mv /usr/nginx/html/site/build/index.html /usr/nginx/html/site/index.html"
      ]
   }

}

我无法弄清楚我做错了什么。据我所知，它应该能够污染这些资源中的每一个。这就是我在命令行上所做的：terraform taint null_resource.provision_last和terraform taint null_resource.provision_first

我设法让本地开发服务器运行Vagrant，并在无主配置中使用Salt对其进行配置。现在，我正在尝试利用现有的盐状态来配置生产服务器，但到目前为止还没有弄清楚如何去做。

我已经设法用Terraform创建了一个Digital Ocean 液滴，现在我想用Salt来配置它，理想情况下使用用于配置开发机器的相同文件。在 Vagrant 中，这是相当简单的，因为只需要在 中声明它，如下所示：.slsVagrantfile

config.vm.provision :salt do |salt|
salt.minion_config = "salt/minion"
salt.run_highstate = true

之后，只需创建一个指向我们的状态文件的状态树，我们在其中声明我们希望为我们的机器提供的包，我们希望同步的文件等。

但是，Terraform似乎没有类似的方法可以做到这一点。Terraform 关于供应商的文档相当稀缺。除了调用 Chef 客户端，或者直接在 a 上声明我们想要复制的文件provisioner，或者调用脚本之外，我找不到任何关于如何调用 Salt 来配置实例的参考。我想知道这是否可能？

这是我的servers.tf：

module "hosting" {
    source                  = "./modules/server"
    droplet_count           = 1
    droplet_image           = "ubuntu-14-04-x64"
    droplet_region          = "nyc2"
    droplet_size            = "512mb"       
    dns_record_domain       = "site.org"
    droplet_backups         = true
    droplet_ipv6            = true
    droplet_privatenet      = true
}

以下是我的droplet.tf文件：

provider "digitalocean" {
    token           = "${var.do_token}"
}

resource "digitalocean_droplet" "droplet" {
    image           = "${var.droplet_image}"
    name            = "${var.droplet_type}-${format("%02d", count.index+1)}"
    region          = "${var.droplet_region}"
    size            = "${var.droplet_size}"
    ssh_keys        = ["${var.ssh_fingerprint}"]
    backups         = "${var.droplet_backups}"
    ipv6            = "${var.droplet_ipv6}"
    private_networking  = "${var.droplet_privatenet}"
}

resource "digitalocean_ssh_key" "default" {
    name            = "rsa-key-nopass"
    public_key      = "${file("./.ssh/rsa-key-nopass")}"
}

最后，我的dns_records.tf文件：

provider "cloudflare" {
    email   = "${var.cf_email}"
    token   = "${var.cf_token}" 
}

resource "cloudflare_record" "ipv4" {
    count   = "${var.droplet_count}"
    domain  = "${var.dns_record_domain}"
    name    = "${element(digitalocean_droplet.droplet.*.name, count.index)}"
    value   = "${element(digitalocean_droplet.droplet.*.ipv4_address, count.index)}"
    type    = "A"
    ttl     = 3600
}

resource "cloudflare_record" "ipv6" {
    count   = "${var.droplet_count}"
    domain  = "${var.dns_record_domain}"
    name    = "${element(digitalocean_droplet.droplet.*.name, count.index)}"
    value   = "${element(digitalocean_droplet.droplet.*.ipv6_address, count.index)}"
    type    = "AAAA"
    ttl     = 3600
}

提前感谢您的帮助！

更新

我添加了以下两个provisioner块：

provisioner "file" {
    source = "../salt"
    destination = "/etc/salt"
}

provisioner "remote-exec" {
    inline = [
      # install and configure salt-minion
      "curl -L https://bootstrap.saltstack.com -o install_salt.sh",
      "sudo sh install_salt.sh",
      "salt '*' state.apply"
    ]
}

该/salt目录已成功复制并安装了盐，但在应用任何状态之前/etc/salt我会收到一条消息。Script exited with non-zero exit status: 127具体为什么，我还不知道。