Amazon s3 LocalStack使用terraform在本地创建S3存储桶';我没有名字

Amazon s3 LocalStack使用terraform在本地创建S3存储桶';我没有名字,amazon-s3,localstack,Amazon S3,Localstack,阿罗哈 TL&DR: 我试图通过使用terraform而不是awscli或awslocal在本地创建s3 bucket,但遇到了一些错误。我想知道localstack是否支持这种方式。我不确定我在这里做错了什么,但我想我需要在这里使用awscli来创建s3存储桶。有人知道为什么不转发bucket名称吗 长版本: 我正在使用docker-compose.yaml定义localstack docker容器: version: '3' services: localstack: imag

阿罗哈

TL&DR:

我试图通过使用terraform而不是awscli或awslocal在本地创建s3 bucket,但遇到了一些错误。我想知道localstack是否支持这种方式。我不确定我在这里做错了什么,但我想我需要在这里使用awscli来创建s3存储桶。有人知道为什么不转发bucket名称吗

长版本:

我正在使用docker-compose.yaml定义localstack docker容器:

version: '3'

services:
  localstack:
    image: localstack/localstack:0.10.5
    ports:
    - "4572:4572"
    - "4584:4584"
    - "${PORT_WEB_UI-8080}:${PORT_WEB_UI-8080}"
    environment:
    - DEFAULT_REGION=eu-central-1
    - SERVICES=s3,secretsmanager
    - DEBUG=${DEBUG- }
    - DATA_DIR=${DATA_DIR- }
    - PORT_WEB_UI=${PORT_WEB_UI- }
    - DOCKER_HOST=${LOCALSTACK_DOCKER_HOST-unix:///var/run/docker.sock}
    - TF_VAR_localstack_host=localhost
    volumes:
    - "/var/run/docker.sock:/var/run/docker.sock"
我使用这个terraform main.tf来定义我要在docker容器中创建的内容:

variable "localstack_host" {
  default = "localhost"
}

provider "aws" {
  version = "~> 2.39.0"
  alias = "local"
  region = "eu-central-1"
  access_key = "This is not an actual access key."
  secret_key = "This is not an actual secret key."
  skip_credentials_validation = true
  skip_metadata_api_check     = true
  skip_requesting_account_id  = true
  endpoints {
    secretsmanager  = "http://${var.localstack_host}:4584"
    s3              = "http://${var.localstack_host}:4572"
  }
}

resource "aws_s3_bucket" "s3_encryption_test_bucket" {
  bucket = "s3-encryption-test-bucket"
  provider = "aws.local"
}
运行docker容器后,我将terraform文件应用于localstack的本地运行实例:

terraform plan
terraform apply
我从terraform得到的错误是:

aws_s3_bucket.s3_encryption_test_bucket: Creating...
  acceleration_status:         "" => "<computed>"
  acl:                         "" => "private"
  arn:                         "" => "<computed>"
  bucket:                      "" => "s3-encryption-test-bucket"
  bucket_domain_name:          "" => "<computed>"
  bucket_regional_domain_name: "" => "<computed>"
  force_destroy:               "" => "false"
  hosted_zone_id:              "" => "<computed>"
  region:                      "" => "<computed>"
  request_payer:               "" => "<computed>"
  versioning.#:                "" => "<computed>"
  website_domain:              "" => "<computed>"
  website_endpoint:            "" => "<computed>"
aws_s3_bucket.s3_encryption_test_bucket: Still creating... (10s elapsed)
aws_s3_bucket.s3_encryption_test_bucket: Still creating... (20s elapsed)
.....
aws_s3_bucket.s3_encryption_test_bucket: Still creating... (2m10s elapsed)
aws_s3_bucket.s3_encryption_test_bucket: Still creating... (2m20s elapsed)

Error: Error applying plan:

1 error(s) occurred:

* aws_s3_bucket.s3_encryption_test_bucket: 1 error(s) occurred:

* aws_s3_bucket.s3_encryption_test_bucket: error getting S3 Bucket CORS configuration: timeout while waiting for state to become 'success' (timeout: 2m0s)

我遇到了同样的问题。简单地在资源块中定义ACL就解决了这个问题:

resource "aws_s3_bucket" "s3_encryption_test_bucket" {
  bucket = "s3-encryption-test-bucket"
  provider = "aws.local"
  acl = "private"
}
resource "aws_s3_bucket" "s3_encryption_test_bucket" {
  bucket = "s3-encryption-test-bucket"
  provider = "aws.local"
  acl = "private"
}