terraform/website/source/docs/provisioners/connection.html.markdown

83 lines
2.8 KiB
Markdown
Raw Normal View History

2014-07-23 18:40:15 +02:00
---
layout: "docs"
page_title: "Provisioner Connections"
sidebar_current: "docs-provisioners-connection"
2014-10-22 05:21:56 +02:00
description: |-
2015-04-10 21:28:28 +02:00
Many provisioners require access to the remote resource. For example, a provisioner may need to use SSH or WinRM to connect to the resource.
2014-07-23 18:40:15 +02:00
---
# Provisioner Connections
Many provisioners require access to the remote resource. For example,
2015-04-10 21:28:28 +02:00
a provisioner may need to use SSH or WinRM to connect to the resource.
2014-07-23 18:40:15 +02:00
Terraform uses a number of defaults when connecting to a resource, but these
can be overridden using `connection` block in either a `resource` or `provisioner`.
2014-07-23 18:40:15 +02:00
Any `connection` information provided in a `resource` will apply to all the
provisioners, but it can be scoped to a single provisioner as well. One use case
is to have an initial provisioner connect as root to setup user accounts, and have
subsequent provisioners connect as a user with more limited permissions.
## Example usage
```
2015-04-10 21:28:28 +02:00
# Copies the file as the root user using SSH
2014-07-23 18:40:15 +02:00
provisioner "file" {
source = "conf/myapp.conf"
destination = "/etc/myapp.conf"
connection {
user = "root"
password = "${var.root_password}"
}
}
2015-04-10 21:28:28 +02:00
# Copies the file as the Administrator user using WinRM
provisioner "file" {
source = "conf/myapp.conf"
destination = "C:/App/myapp.conf"
connection {
type = "winrm"
user = "Administrator"
password = "${var.admin_password}"
}
}
2014-07-23 18:40:15 +02:00
```
## Argument Reference
2015-04-10 21:28:28 +02:00
**The following arguments are supported by all connection types:**
2014-07-23 18:40:15 +02:00
2015-04-10 21:28:28 +02:00
* `type` - The connection type that should be used. Valid types are "ssh" and "winrm"
This defaults to "ssh".
2014-07-23 18:40:15 +02:00
2015-04-10 21:28:28 +02:00
* `user` - The user that we should use for the connection. Defaults to "root" when
using type "ssh" and defaults to "Administrator" when using type "winrm".
2014-07-23 18:40:15 +02:00
2015-04-10 21:28:28 +02:00
* `password` - The password we should use for the connection. In some cases this is
provided by the provider.
* `host` - The address of the resource to connect to. This is provided by the provider.
* `port` - The port to connect to. Defaults to 22 when using type "ssh" and defaults
to 5985 when using type "winrm".
* `timeout` - The timeout to wait for the connection to become available. This defaults
to 5 minutes. Should be provided as a string like "30s" or "5m".
* `script_path` - The path used to copy scripts to meant for remote execution.
**Additional arguments only supported by the "ssh" connection type:**
2014-07-23 18:40:15 +02:00
* `key_file` - The SSH key to use for the connection. This takes preference over the
2015-04-10 21:28:28 +02:00
password if provided.
2014-07-23 18:40:15 +02:00
* `agent` - Set to false to disable using ssh-agent to authenticate.
2015-03-16 00:37:33 +01:00
2015-04-10 21:28:28 +02:00
**Additional arguments only supported by the "winrm" connection type:**
2014-07-23 18:40:15 +02:00
2015-04-10 21:28:28 +02:00
* `https` - Set to true to connect using HTTPS instead of HTTP.
2014-07-23 18:40:15 +02:00
2015-04-10 21:28:28 +02:00
* `insecure` - Set to true to not validate the HTTPS certificate chain.
2014-07-23 18:40:15 +02:00
2015-04-10 21:28:28 +02:00
* `cacert` - The CA certificate to validate against.