如何使用ec2_key模塊在Ansible中創建新密鑰？

Question

我不知道如何在Ansible中使用ec2_key模塊。有人可以給我一個如何創建一個新的密鑰對的例子嗎？

Answer 1

在Ansible documentation的例子似乎表明究竟是如何做到這一點：

# Creates a new ec2 key pair named `example` if not present, returns generated 
# private key 
- name: example ec2 key 
    local_action: 
    module: ec2_key 
    name: example 

# Creates a new ec2 key pair named `example` if not present using provided key 
# material 
- name: example2 ec2 key 
    local_action: 
    module: ec2_key 
    name: example2 
    key_material: 'ssh-rsa AAAAxyz...== me@example.com' 
    state: present 

# Creates a new ec2 key pair named `example` if not present using provided key 
# material 
- name: example3 ec2 key 
    local_action: 
    module: ec2_key 
    name: example3 
    key_material: "{{ item }}" 
    with_file: /path/to/public_key.id_rsa.pub 

Answer 2

但你不能保存生成的私鑰，所以這種方法是不恰當的。不使用ec2_key模塊，而是使用命令模塊並使用aws cli生成並將私鑰保存在pem文件中。例如。

- command: /usr/local/bin/aws ec2 create-key-pair --key-name keypair_name > ~/keypair_name.pem 
    register: keypair 

Answer 3

工作示例：

- name: Create an EC2 key 
    ec2_key: 
    name: "mykey" 
    region: "eu-west-1" 
    register: ec2_key 

- name: save private key 
    copy: 
    content: "{{ ec2_key.key.private_key }}" 
    dest: "./aws-private.pem" 
    mode: 0600 
    when: ec2_key.changed