ssh - 如何在 terraform 中使用项目范围的 ssh key

Question

这里有另一篇关于如何将 ssh key 添加到您的 terraform 实例的帖子。但是，我的问题是如何在 terraform 中使用项目范围的 ssh key ？

    /*CREATE INSTANCE TEMPLATE*/
resource "google_compute_instance_template" "template-030601" {
  name        = "terraform-template-030601"
  description = "This template is used to create app server instances."

  tags = ["foo", "bar"]

  labels = {
    environment = "sbx"
  }

  instance_description = "description assigned to instances"
  machine_type         = "f1-micro"
  can_ip_forward       = false


  //Create a new boot disk from an image
  disk {
        source_image = "https://www.googleapis.com/compute/v1/projects/hp-img-cof-st-core-prd/global/images/cof-ubuntu1604-180124"
        auto_delete  = false
        boot         = true
  }

  network_interface {
    subnetwork         = "${var.subnet}"
    subnetwork_project = "${var.subnet_project}"
  }

  metadata {
      sshKeys = 
  }

  metadata_startup_script = "${data.template_file.install_script.rendered}"

}

Answer 1

首先，如果你想在整个项目中使用元数据键，需要用你的 ssh-keys 创建一个单独的部分(如果你需要指定多个键，heredoc 语法很有用):

resource "google_compute_project_metadata" "ssh_keys" {
    metadata {
      ssh-keys = <<EOF
      user1:ssh-rsa <YOUR_SSH_PUBLIC_KEY> user1@darkstar
      user2:ssh-rsa <YOUR_SSH_PUBLIC_KEY> user2@domain
EOF
    }
}

然后在您的 google_compute_instance您需要指定 block-project-ssh-keys在您的元数据配置中。所以尝试添加这个:

resource "google_compute_instance_template" "template-030601" {
    ...
    metadata {
        block-project-ssh-keys = false
    }
    ...
}

如果您想启用它，请替换 false与 true希望有用