Description

Fixed bug in loading of TFLint configuration files.

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2456

Updated CLI args, config attributes and blocks

• remote_state

Description

Improved handling of default value for remote_state bucket_sse_algorithm.

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2438

Updated CLI args, config attributes and blocks

• remote_state

Description

Improved handling of encryption setting for remote_state to not log misleading "out of date" messages in case of AES256 algorithm.

Special thanks

• Special thanks to @kevcube for their contribution!

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2337

Description

• tflint updates:
  • Remove GITHUB_OAUTH_TOKEN environment variable based on GITHUB_TOKEN
  • Remove --module argument from default configuration

Special thanks

• Special thanks to @theurichde for their contribution!

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2424
• https://github.com/gruntwork-io/terragrunt/pull/2422

Description

Updated golang.org/x/crypto dependency to fix CVE-2020-9283.

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2412

Updated CLI args, config attributes and blocks

• dependency

Description

Updated evaluation of mock_outputs_merge_strategy_with_state in the dependency block to avoid crashes on empty mocks.

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2379

Updated CLI args, config attributes and blocks

• locals

Description

Improved error message to include the file name in which locals evaluation failed.

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2404

Updated CLI args, config attributes and blocks

• Fix debug log to be printed only whe GITHUB_TOKEN is exported by tflint

Description

Previously, the logging for the tflint hook was issuing a message that the GITHUB_TOKEN was exported even if it wasn't. So this release fixes that.

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2395

Updated CLI args, config attributes and blocks

• Added tflint as a built-in hook

Description

Added tflint as a built-in hook. Tflint will now work as a built-in function of terragrunt when configured to do so, without needing to install and run it separately.

Special thanks

Special thanks to @everops-miked for their contribution!

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2362
• https://github.com/gruntwork-io/terragrunt/pull/2383
• https://github.com/gruntwork-io/terragrunt/pull/2387

Updated CLI args, config attributes and blocks

• run_cmd

Description

Added --terragrunt-global-cache option for run_cmd to cache output globally instead of per directory.

Special thanks

Special thanks to @tjstansell for their contribution!

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2348

Updated CLI args, config attributes and blocks

• remote_state

Description

Improved setting of encryption to access logs bucket to be decoupled from encryption of state bucket - will be set AES256 if encryption is enabled.

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2375

Updated CLI args, config attributes and blocks

• remote_state

Description

Added to remote_state configuration block attribute accesslogging_bucket_tags containing a map of tags which will be set on access logging bucket,

Special thanks

Special thanks to @edgarsandi for their contribution!

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2355

Updated CLI args, config attributes and blocks

• remote_state [BACKWARD INCOMPATIBLE]

Description

Updated creation of S3 access logging bucket to configure TLS and SSE.
Since only supported encryption algorithm is AES256 (SSE-S3) Terragrunt will stop with an error if will be attempted to create access logging bucket with a different algorithm.

Migration guide

Define bucket_sse_algorithm = AES256 for S3 remote state backends:

remote_state {
  backend  = "s3"
  ...
  config = {
    ...
    accesslogging_bucket_name      = "access-log-bucket-123"
    bucket_sse_algorithm           = "AES256"
  }
}

Related Links

• https://github.com/gruntwork-io/terragrunt/pull/2367

Description

Upgraded CICD jobs to build and test Terragrunt using Go 1.18

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2365

Description

Upgraded golang.org/x/text and golang.org/x/net dependencies to fix CVE-2022-32149 and CVE-2022-27664

Special thanks

Special thanks to @peterdeme for their contribution!

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2341

Updated CLI args, config attributes and blocks

• sops_decrypt_file

Description

Fixed Terragrunt crash when using SOPS secrets in parallel.

Special thanks

Special thanks to @adongy for their contribution!

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2352

Description

Terraform 1.3 support: We are now testing Terragrunt against Terraform 1.3 and is confirmed to be working.

NOTE: Although this release is marked as backward incompatible, it is functionally compatible as nothing has been changed in Terragrunt internals. The minor version release is useful to mark the change in Terraform version that is being tested.

Related links

https://github.com/gruntwork-io/terragrunt/pull/2308

What's Changed

• fix work with multiple aws accounts typo by @senmm in https://github.com/gruntwork-io/terragrunt/pull/2307
• Fix a mistake in markdown by @aazon in https://github.com/gruntwork-io/terragrunt/pull/2303
• Updated navbar - added "we're hiring" by @klijakub in https://github.com/gruntwork-io/terragrunt/pull/2313
• Navbar we are hiring fix by @klijakub in https://github.com/gruntwork-io/terragrunt/pull/2321

New Contributors

• @senmm made their first contribution in https://github.com/gruntwork-io/terragrunt/pull/2307
• @aazon made their first contribution in https://github.com/gruntwork-io/terragrunt/pull/2303

Full Changelog: https://github.com/gruntwork-io/terragrunt/compare/v0.39.1...v0.39.2

Updated CLI args, config attributes and blocks

• render-json
• aws-provider-patch
• validate-inputs

Description

Added handling of --help option for Terragrunt commands

Related Links

• https://github.com/gruntwork-io/terragrunt/pull/2297

Updated CLI args, config attributes and blocks

• render-json [BACKWARD INCOMPATIBLE]

Description

Improved render-json execution to use mock outputs of dependency if read of terraform outputs fails.
Updated docs to reflect run-all syntax.

Related Links

• https://github.com/gruntwork-io/terragrunt/pull/2288
• https://github.com/gruntwork-io/terragrunt/pull/2266