Terraform Provisioner Ansible Versions Save

Fixed

• Handle connection private key and bastion host key as files, not paths, reported and fixed: https://github.com/radekg/terraform-provisioner-ansible/issues/90

New features

• @adamwg contributed a Dockerfile: https://github.com/radekg/terraform-provisioner-ansible/pull/91, usage documented in the readme
• new properties added in response to:
  • ansible_ssh_settings.insecure_no_strict_host_key_checking: if true, host key checking will be disabled when connecting to the target host, default false; when connecting via bastion, bastion will not execute any SSH keyscan
  • ansible_ssh_settings.insecure_bastion_no_strict_host_key_checking: if true, host key checking will be disabled when connecting to the bastion host, default false
  • ansible_ssh_settings.user_known_hosts_file: used only when ansible_ssh_settings.insecure_no_strict_host_key_checking=false; if set, the provided path will be used instead of an auto-generate known hosts file; when executing via bastion host, it allows the administrator to provide a known hosts file, no SSH keyscan will be executed on the bastion; default empty string
  • ansible_ssh_settings.bastion_user_known_hosts_file: used only when ansible_ssh_settings.insecure_bastion_no_strict_host_key_checking=false; if set, the provided path will be used instead of an auto-generate known hosts file

Other

• Terraform dependency updated to v0.11.10
• existing examples have been renamed to indicate usage of sshagent; additional private key examples will be provided later
• as part of https://github.com/radekg/terraform-provisioner-ansible/pull/94:
  • use separate bastion and target known hosts files
  • handle bastion private key the same way as target private key, write to disk for Ansible, use the temporary file path:
    • https://github.com/radekg/terraform-provisioner-ansible/pull/94/commits/ec0b7428eb7c9b26cda1938074c9a887f405f851#diff-41b9f25ea82052debf71edc009909af0R81
    • https://github.com/radekg/terraform-provisioner-ansible/pull/94/commits/ec0b7428eb7c9b26cda1938074c9a887f405f851#diff-e94d37247fd9b30510681354365e7000R514
    • https://github.com/radekg/terraform-provisioner-ansible/pull/94/commits/b04b3354834880c9e88dd9358edd82479436705b
  • when generating an Ansible command, provide ANSIBLE_FORCE_COLOR regardless of playbook or module

Fixed

• a part of a https://github.com/radekg/terraform-provisioner-ansible/pull/53 fix was missed while preparing 2.0.0 release, as reported by @adamwg in a follow up PR https://github.com/radekg/terraform-provisioner-ansible/pull/87

Fixed

• bastion host support in 1.0.0 was implemented very badly, generally, that version should not be used when bastion host should be used; there are no plans for fixing 1.0.0 bastion support, please switch to 2.x

Breaking changes

• local provisioning becomes the default, remote provisioning enabled with remote {} resource
• change plays.playbook and plays.module to a resource
• remove yes/no strings, boolean values are used instead
• default values now provided using the defaults resource
• diff, become and verbose can be set only on plays, no default override for boolean values

New features

• added --diff support
• added --vault_id support
• added ansible_ssh_settings {} resource instead of magic environment variables
• remote provisioner: use a custom Ansible installer: https://github.com/radekg/terraform-provisioner-ansible/issues/76
• remote provisioner: use a custom remote directory for the Ansible installer: https://github.com/radekg/terraform-provisioner-ansible/issues/78
• remote provisioner: use a custom bootstrap directory for Ansible data: https://github.com/radekg/terraform-provisioner-ansible/issues/79
• support connection.host_key and connection.bastion_host_key

Other

• full readme
• examples

First release of the provisioner. Status as of https://github.com/radekg/terraform-provisioner-ansible/commit/25d515efeeac27db4d035fbcda1250eb15863931.

Relevant comment: https://github.com/hashicorp/terraform/issues/2661#issuecomment-423769085