如何使用 ansible 角色生成 terraform 执行计划？答案

【问题标题】：How to generate terraform execution plan using ansible role?如何使用 ansible 角色生成 terraform 执行计划？
【发布时间】：2021-05-27 19:40:46
【问题描述】：

ansible 提供的 Terraform 模块非常适合使用 S3 后端配置为 statefile 创建 aws 资源。但无法使用此模块获得terraform plan 输出。我们希望输出应该列出如下内容： Plan: 1 to add, 0 to change, 0 to destroy. 并给出要创建/销毁/更改的资源的详细信息

已在 ansible 中尝试过以下任务，但无法按预期生成输出。

下面是创建计划的ansible任务：

- name: "create file"
  shell: "touch {{playbook_dir}}/tfplan && ls -larth ../terraform/{{role_name}} "

- name: "Run terraform project with plan file"
  terraform:
    state: planned
    backend_config:
      bucket: "{{bootstrap_prefix}}-{{aws_account_type}}-{{caller_facts.account}}"
      region: "{{ bootstrap_aws_region }}"
      kms_key_id: "{{ kms_id.stdout }}"
      encrypt: true
      workspace_key_prefix: "{{ app_parent }}-{{ app_name }}"
      key: "terraform.tfstate"
    force_init: true
    project_path: "../terraform/{{role_name}}"
    plan_file: "{{playbook_dir}}/tfplan"
    variables:
      app_name: "{{ app_name }}"
    workspace: "{{ app_env }}"

上述ansible任务的输出：

ok: [localhost] => {
    "changed": false,
    "command": "/usr/local/bin/terraform -lock=true /root/project/ansible/tfplan",
    "invocation": {
        "module_args": {
            "backend_config": {
                "bucket": "XXXXXXXX2440728499",
                "encrypt": true,
                "key": "terraform.tfstate",
                "kms_key_id": "XXXXXXXX",
                "region": "XXXXXXXX",
                "workspace_key_prefix": "XXXXXX"
            },
            "binary_path": null,
            "force_init": true,
            "lock": true,
            "lock_timeout": null,
            "plan_file": "/root/project/ansible/tfplan",
            "project_path": "../terraform/applications",
            "purge_workspace": false,
            "state": "planned",
            "state_file": null,
            "targets": [],
            "variables": {
                "app_name": "application"

            },
            "variables_file": null,
            "workspace": "uat"
        }
    },
    "outputs": {},
    "state": "planned",
    "stderr": "",
    "stderr_lines": [],
    "stdout": "",
    "stdout_lines": [],
    "workspace": "uat"
}

它适用于 state: present (terraform apply) ，但希望它适用于 state:planned (terraform plan)

【问题讨论】：

2月出现that issue was fixed；你可以试试 ansible 2.8.0 看看它是否适合你？
非常感谢...用 ansible 2.8.0 解决了

标签： ansible terraform

【解决方案1】：

在current ansible documentation:To just run a terraform plan, use check mode.

另外，你应该添加terraform模块参数：

- name: "Run terraform project with plan file"
  terraform:
    state: planned
    check_mode: true

【讨论】：