如何使用 local_file 资源将由 Terraform 中的 tls_private_key 资源创建的 pem 文件保存到磁盘？

Question

我想使用资源将资源private_key_pem生成的内容保存tls_private_key到本地磁盘上的文件中local_file。

resource "tls_private_key" "example" {
  algorithm = "RSA"
  rsa_bits  = 4096
}

resource "aws_key_pair" "generated_key" {
  key_name   = "cloudtls"
  public_key = tls_private_key.example.public_key_openssh
}

resource "aws_instance" "automation" {
  instance_type        = var.instance_type
  ami                  = var.image_id
  iam_instance_profile = aws_iam_instance_profile.ec2_profile.name
  key_name = aws_key_pair.generated_key.key_name
}

resource "local_file" "pem_file" {
  filename = "pemfile.pem"
  #
}

Answer 1

以下代码将私钥（.pem 文件）保存到指定路径。

resource "local_file" "cloud_pem" { 
  filename = "${path.module}/cloudtls.pem"
  content = tls_private_key.example.private_key_pem
}