Terraform插值表达式错误：EIP与Auto Scaling Group关联脚本问题

错误原因 #

在Terraform的user_data字段中，${}会被识别为Terraform插值表达式。你原脚本里的EIP_LIST=${"eipalloc-09e7274dd3c641ae6" "eipalloc-05e8e926926f9de55"}写法不符合Terraform插值语法，导致解析时触发"Extra characters after interpolation expression"错误。

修正后的脚本 #

调整Bash脚本的EIP定义方式，改用标准数组格式，同时避免Terraform的插值冲突：

#!/bin/bash
INSTANCE_ID=$(ec2-metadata --instance-id | cut -d " " -f 2)
MAXWAIT=10
# 定义EIP数组
EIP_LIST=("eipalloc-09e7274dd3c641ae6" "eipalloc-05e8e926926f9de55")

# 遍历EIP列表
for EIP in "${EIP_LIST[@]}"; do
  echo "Checking if EIP with ALLOC_ID[$EIP] is free...."
  ISFREE=$(aws ec2 describe-addresses --allocation-ids $EIP --query Addresses[].InstanceId --output text --region ap-south-1)
  STARTWAIT=$(date +%s)

  while [ ! -z "$ISFREE" ]; do
    if [ "$(($(date +%s) - $STARTWAIT))" -gt $MAXWAIT ]; then
      echo "WARNING: We waited $MAXWAIT seconds, we're forcing it now."
      ISFREE=""
    else
      echo "Waiting for EIP with ALLOC_ID[$EIP] to become free...."
      sleep 3
      ISFREE=$(aws ec2 describe-addresses --allocation-ids $EIP --query Addresses[].InstanceId --output text --region ap-south-1)
    fi
  done

  echo "Running: aws ec2 associate-address --instance-id $INSTANCE_ID --allocation-id $EIP --allow-reassociation --region ap-south-1"
  aws ec2 associate-address --instance-id $INSTANCE_ID --allocation-id $EIP --allow-reassociation --region ap-south-1
  # 绑定成功后退出循环，避免绑定多个EIP
  break
done

Terraform中使用注意事项 #

在Terraform的user_data中引用该脚本时，需避免Terraform解析脚本内的$符号，可使用带单引号的heredoc格式：

resource "aws_launch_template" "asg_launch_template" {
  # 其他配置项...

  user_data = base64encode(<<-'EOF'
    #!/bin/bash
    INSTANCE_ID=$(ec2-metadata --instance-id | cut -d " " -f 2)
    MAXWAIT=10
    EIP_LIST=("eipalloc-09e7274dd3c641ae6" "eipalloc-05e8e926926f9de55")

    for EIP in "${EIP_LIST[@]}"; do
      echo "Checking if EIP with ALLOC_ID[$EIP] is free...."
      ISFREE=$(aws ec2 describe-addresses --allocation-ids $EIP --query Addresses[].InstanceId --output text --region ap-south-1)
      STARTWAIT=$(date +%s)

      while [ ! -z "$ISFREE" ]; do
        if [ "$(($(date +%s) - $STARTWAIT))" -gt $MAXWAIT ]; then
          echo "WARNING: We waited $MAXWAIT seconds, we're forcing it now."
          ISFREE=""
        else
          echo "Waiting for EIP with ALLOC_ID[$EIP] to become free...."
          sleep 3
          ISFREE=$(aws ec2 describe-addresses --allocation-ids $EIP --query Addresses[].InstanceId --output text --region ap-south-1)
        fi
      done

      echo "Running: aws ec2 associate-address --instance-id $INSTANCE_ID --allocation-id $EIP --allow-reassociation --region ap-south-1"
      aws ec2 associate-address --instance-id $INSTANCE_ID --allocation-id $EIP --allow-reassociation --region ap-south-1
      break
    done
  EOF
  )
}

关键修正点 #

• 将错误的EIP变量定义改为标准Bash数组格式EIP_LIST=("eipalloc-xxx" "eipalloc-xxx")
• 遍历数组时使用"${EIP_LIST[@]}"，确保每个EIP作为独立元素处理
• 使用<<-'EOF'格式的heredoc，阻止Terraform解析脚本内的$符号，避免插值冲突
• 添加break语句，确保每个实例仅绑定一个空闲EIP，避免重复操作

内容的提问来源于stack exchange，提问作者Aravind