Terraform：运行空资源后如何强制资源更新？

Question

这是我的 terraform 代码：​​

resource "aws_s3_bucket_object" "file_upload" {
  for_each = fileset("init_conf/", "*")
  bucket = aws_s3_bucket.conf_bucket.id
  acl    = "private"
  key    = "config/${local.service_name}/${each.value}"
  source = "init_conf/${each.value}"
  source_hash = filemd5("init_conf/${each.value}")
  kms_key_id = "arn:aws:kms:##################:###################"
  server_side_encryption = "aws:kms"
  

  tags = merge(tomap({
               "Name" = local.service_name,
  }), local.default_tags)
}


resource "null_resource" "cert" {

  triggers = {
    always_run = "${timestamp()}"
  }

  provisioner "local-exec" {
    command = "openssl req -new -newkey rsa:2048 -days 365 -nodes -x509 -keyout ${path.cwd}/init_conf/${var.cname}.key -out ${path.cwd}/init_conf/${var.cname}.crt"
  }
}

terraform apply 执行后，首先刷新：resource "aws_s3_bucket_object" "file_upload" 的状态，然后才执行：provisioner "local-exec"。然而，我想要的是：provisioner“local-exec”首先执行，它为我生成一个证书并存储它，然后才使用资源“aws_s3_bucket_object”“file_upload”上传文件。

有人可以帮忙吗？

Answer 1

您可以添加：

depends_on = [null_resource.cert]  

致您的aws_s3_bucket_object.file_upload：

resource "aws_s3_bucket_object" "file_upload" {
  for_each = fileset("init_conf/", "*")
  bucket = aws_s3_bucket.conf_bucket.id
  acl    = "private"
  key    = "config/${local.service_name}/${each.value}"
  source = "init_conf/${each.value}"
  source_hash = filemd5("init_conf/${each.value}")
  kms_key_id = "arn:aws:kms:##################:###################"
  server_side_encryption = "aws:kms"
  
  depends_on = [null_resource.cert] 

  tags = merge(tomap({
               "Name" = local.service_name,
  }), local.default_tags)
}