> ## Documentation Index
> Fetch the complete documentation index at: https://notes.kodekloud.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Provisioner Behaviour
> Learn to use provisioners in Terraform for executing scripts during resource creation or destruction, enhancing flexibility and custom actions on resources.
In this lesson, you'll learn how to leverage provisioners in Terraform to execute scripts or commands during resource creation or destruction. Provisioners offer flexibility by allowing you to perform custom actions on your resources, such as logging details or cleaning up after resource deletion.
## Creation-Time Provisioners
Creation-time provisioners are triggered when a resource is created. Terraform supports both remote and local execution of commands during this phase. For instance, the example below launches an AWS EC2 instance and uses the local-exec provisioner to record the instance's public IP address to a local file:
```hcl theme={null}
resource "aws_instance" "webserver" {
ami = "ami-0edab43b6fa892279"
instance_type = "t2.micro"
provisioner "local-exec" {
command = "echo Instance ${aws_instance.webserver.public_ip} Created! > /tmp/instance_state.txt"
}
}
```
After applying this configuration, you can verify the output by running:
```bash theme={null}
$ cat /tmp/instance_state.txt
```
Remember to verify that the specified file path exists and is writable by your user.
## Destroy-Time Provisioners
Terraform also allows you to execute provisioners right before a resource is destroyed. By setting the `when` argument to `destroy`, you can define commands to be executed during the resource's teardown process. The example below shows a resource block that contains both creation and destroy-time provisioners:
```hcl theme={null}
resource "aws_instance" "webserver" {
ami = "ami-0edab43b6fa892279"
instance_type = "t2.micro"
provisioner "local-exec" {
command = "echo Instance ${aws_instance.webserver.public_ip} Created! > /tmp/instance_state.txt"
}
provisioner "local-exec" {
when = destroy
command = "echo Instance ${aws_instance.webserver.public_ip} Destroyed! > /tmp/instance_state.txt"
}
}
```
After the resource is destroyed, checking the file might show an output similar to:
```bash theme={null}
$ cat /tmp/instance_state.txt
Instance 3.96.136.157 Destroyed!
```
## Handling Provisioner Failures
By default, if a provisioner fails, Terraform stops the execution and the entire `terraform apply` fails. For example, if the command in the creation-time provisioner attempts to write to a non-existent directory, Terraform will produce an error:
```hcl theme={null}
resource "aws_instance" "webserver" {
ami = "ami-0edab43b6fa892279"
instance_type = "t2.micro"
provisioner "local-exec" {
on_failure = fail
command = "echo Instance ${aws_instance.webserver.public_ip} Created! > /temp/instance_state.txt"
}
provisioner "local-exec" {
when = destroy
command = "echo Instance ${aws_instance.webserver.public_ip} Destroyed! > /temp/instance_state.txt"
}
}
```
Running `terraform apply` with this configuration may produce an output similar to:
```bash theme={null}
$ terraform apply
Error: Error running command 'echo 35.183.14.192 > /temp/pub_ip.txt': exit status 1.
Output: The system cannot find the path specified.
```
When this error occurs, Terraform marks the associated resource as tainted, indicating it may need to be recreated.
Ensure that any file paths or commands used in provisioners are valid and tested. Failing provisioners can block your deployment process.
## Allowing Provisioner Failures
In some cases, the execution of a provisioner may be optional and should not halt the entire apply process if it fails. To override the default behavior, set the `on_failure` argument to `continue`:
```hcl theme={null}
resource "aws_instance" "webserver" {
ami = "ami-0edab43b6fa892279"
instance_type = "t2.micro"
provisioner "local-exec" {
on_failure = continue
command = "echo Instance ${aws_instance.webserver.public_ip} Created! > /temp/instance_state.txt"
}
provisioner "local-exec" {
when = destroy
command = "echo Instance ${aws_instance.webserver.public_ip} Destroyed! > /temp/instance_state.txt"
}
}
```
With the `on_failure` option set to `continue`, Terraform proceeds with the apply process even if the provisioner fails:
```plaintext theme={null}
$ terraform apply
aws_instance.webserver (local-exec): The system cannot find the path specified.
aws_instance.project: Creation complete after 22s [id=i-01585c2b9dbc445db]
```
This concludes the lesson on Terraform provisioners. Experiment with these configurations to solidify your understanding and enhance your Terraform deployments.
For more information, consider visiting the following resources:
* [Terraform Provisioners Documentation](https://www.terraform.io/docs/provisioners/index.html)
* [AWS Provider Documentation](https://registry.terraform.io/providers/hashicorp/aws/latest/docs)