Всем привет.
Под пользователем lnxcfg генерирую ключи в "ssh/insecure-deployer"
ssh-keygen -t rsa -C "insecure-deployer" -P '' -f ssh/insecure-deployer
Далее создаю:
*
key-pairs.tf*
resource "aws_key_pair" "deployer" {
key_name = "deployer-key"
public_key = file("ssh/insecure-deployer.pub")
}*
nat-server.tf*
/* NAT/VPN server */
resource "aws_instance" "nat" {
ami = lookup(var.amis, var.region)
instance_type = "t2.micro"
subnet_id = aws_subnet.public.id
security_groups = [aws_security_group.default.id, aws_security_group.nat.id]
key_name = aws_key_pair.deployer.key_name
source_dest_check = false
connection {
user = "lnxcfg"
host_key = "ssh/insecure-deployer"
host = "var.host"
}
provisioner "remote-exec" {
inline = [
"sudo iptables -t nat -A POSTROUTING -j MASQUERADE",
"echo 1 | sudo tee /proc/sys/net/ipv4/conf/all/forwarding > /dev/null",
/* Install docker */
"curl -sSL https://get.docker.com/ubuntu/ | sudo sh",
/* Initialize open vpn data container */
"sudo mkdir -p /etc/openvpn",
"sudo docker run --name ovpn-data -v /etc/openvpn busybox",
/* Generate OpenVPN server config */
"sudo docker run --volumes-from ovpn-data --rm gosuri/openvpn ovpn_genconfig -p var.vpc_cidr -u udp://aws_instance.nat.public_ip"
]
}
}
Делаю apply и получаю ошибку.
aws_instance.nat: Still creating... [10s elapsed]
aws_instance.nat: Still creating... [20s elapsed]
aws_instance.nat: Still creating... [30s elapsed]
aws_instance.nat: Provisioning with 'remote-exec'...
Error: knownhosts: /tmp/tf-known_hosts148129445:1: knownhosts: missing key type pattern
Вижу, что написано "knownhosts: missing key type pattern", но не понимаю почему.
