terragrunt

Description

Updated Terragrunt to retry in case of "Could not download module The requested URL returned error: 429" errors.

Special thanks

Special thanks to @lorengordon for their contribution!

Related Links

• https://github.com/gruntwork-io/terragrunt/pull/2276

Description

Implemented usage of AWS partition from the current session when constructing KMS key ARN

Special thanks

Special thanks to @lorengordon for their contribution!

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2257

Description

Added passing of environment variables to dependencies when preparing list of modules to confirm destroy action

Special thanks

Special thanks to @jlepere-everlaw for their contribution!

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2274

Updated CLI args, config attributes and blocks

• --terragrunt-use-partial-parse-config-cache

Description

Improved parsing speed of HCL files by introducing an in-memory cache

Special thanks

Special thanks to @maunzCache for their contribution!

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2204

Updated CLI args, config attributes and blocks

• remote_state

Description

• This introduces the skip_bucket_public_access_blocking configuration to the remote_state block for the S3 backend, when set to true, created S3 bucket will not have public access blocking enabled. This will flag may be useful when Terragunt defaults conflict with AWS organization policies.
• Improve render JSON tests to be more stable
• Documentation fixes: broken link, and spelling correction

Special thanks

Special thanks to the following users for their contribution:

• @gpdenny
• @rufusnufus
• @conorevans

Links

• https://github.com/gruntwork-io/terragrunt/pull/2246
• https://github.com/gruntwork-io/terragrunt/pull/2248
• https://github.com/gruntwork-io/terragrunt/pull/2250
• https://github.com/gruntwork-io/terragrunt/pull/2238

Updated CLI args, config attributes and blocks

• render-json [CLI cmd]

Description

• Fixed a bug in render-json where when running with run-all, it reuses the same rendered json file for all runs, causing a race condition where the last module to run always wins. Now the rendered json output is created adjacent to each terragrunt.hcl config terragrunt finds.

Links

• https://github.com/gruntwork-io/terragrunt/pull/2230

Updated CLI args, config attributes and blocks

• render-json [CLI cmd]

Description

• Updated render-json command to support --with-metadata option that will add to each JSON field metadata information

Links

• https://github.com/gruntwork-io/terragrunt/pull/2199

Updated CLI args, config attributes and blocks

• render-json [CLI cmd]
• locals [Block]

Description

• Fixed a bug in render-json where dependency blocks and locals information were lost in the resulting rendered config.
• Improved error logging in Terragrunt:
  • Terragrunt will now show the paths of the files where locals parsing failed.
  • Terragrunt will now show the paths of the modules where Terraform calls had errors.
• Updated dependencies that security patches.

Links

• https://github.com/gruntwork-io/terragrunt/pull/2175
• https://github.com/gruntwork-io/terragrunt/pull/2191
• https://github.com/gruntwork-io/terragrunt/pull/2192

Updated CLI args, config attributes and blocks

• terraform

Description

• Faster approach to identify that local terraform sources have changes

Special thanks

Special thanks to the following users for their contribution:

• @Sinjo

Links

• https://github.com/gruntwork-io/terragrunt/pull/2168

Updated CLI args, config attributes and blocks

• remote_state

Description

• Fixed parsing of existing IAM policy response for S3 buckets
• Added handling of empty boolean fields in S3 IAM policy
• Improved stability of integration tests

Links

• https://github.com/gruntwork-io/terragrunt/pull/2111
• https://github.com/gruntwork-io/terragrunt/pull/2118
• https://github.com/gruntwork-io/terragrunt/pull/2160

Updated CLI args, config attributes and blocks

• terraform

Description

• Updated logic in the handling of error_hook to match terraform stdout and stderr messages

Links

• https://github.com/gruntwork-io/terragrunt/pull/2101

Updated CLI args, config attributes and blocks

• --terragrunt-no-auto-approve [NEW CLI FLAG]
• --terragrunt-fetch-dependency-output-from-state [NEW CLI FLAG]
• run-all (cmd)
• dependency (block)

Description

• Added new flag --terragrunt-no-auto-approve which will prevent Terragrunt from automatically including the -auto-approve flag to apply and destroy calls for run-all. In order to make the prompts work correctly, Terragrunt will also automatically set parallelism to 1.
• Added new flag --terragrunt-fetch-dependency-output-from-state which will instruct Terragrunt to directly lookup the outputs from the state object in S3, by passing terraform. This could drastically speed up the dependency fetching routine. Note that this feature is experimental and only supports the S3 backend.
• Added the ability to configure the Server Side Encryption settings for the S3 Bucket, using two new parameters on the config:
  • bucket_sse_algorithm
  • bucket_sse_kms_key_id

Special thanks

Special thanks to the following users for their contribution:

• @Ido-DY

Links

• https://github.com/gruntwork-io/terragrunt/pull/2156
• https://github.com/gruntwork-io/terragrunt/pull/2123
• https://github.com/gruntwork-io/terragrunt/pull/2157

Description

Terraform 1.2 support: We are now testing Terragrunt against Terraform 1.2 and is confirmed to be working.

NOTE: Although this release is marked as backward incompatible, it is functionally compatible as nothing has been changed in Terragrunt internals. The minor version release is useful to mark the change in Terraform version that is being tested.

Updated CLI args, config attributes and blocks

• terraform

Description

• Fixed handling of include_in_copy patterns to include files that aren't in the root of terraform module

Special thanks

Special thanks to the following users for their contribution!

• @slawekzachcial

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2112

Description

Improved local source code download behavior to generate a hash of local directory and copy only changed files.

Special thanks

Special thanks to @BlackDark for their contribution!

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2006

Description

Updated dependency go-getter to 1.6.1.

Description

This release is functionally equivalent to v0.37.0

Update the documentation to suggest generate blocks for managing the remote state backend configuration for users who do not want automated state management by Terragrunt.

Updated CLI args, config attributes and blocks

• remote_state

Description

• This introduces the disable_bucket_update configuration to the remote_state block for the S3 backend. This flag has no functional effect, but is useful to ease the transition to v0.37.0. Refer to the release notes for v0.37.0 for more details.

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2105

Updated CLI args, config attributes and blocks

• remote_state [BACKWARD INCOMPATIBLE]

Description

• Updated logic for handling remote_state to enforce what is defined in the block of config, the change affects default encryption settings, public access blocking, bucket policy (enforce SSL only), access logging, and versioning

• Fixed behavior for enforcing EnforcedTLS to not overwrite already configured RootAccess policy

Migration guide

If you do not want terragrunt to update the S3 bucket based on the configurations, you can define the config attribute disable_bucket_update = true in the remote_state block.

If you have an environment where it is difficult to update terragrunt and your configuration simultaneously, you can use v0.36.12 which supports the new disable_bucket_update configuration, but does not implement the bucket updating behavior.

To perform a safe upgrade:

• Upgrade your Terragrunt environment to v0.36.12
• Add disable_bucket_update = true in the remote_state block config map.
• Run terragrunt to confirm Terragrunt doesn't update the state buckets.
• Upgrade your Terragrunt environment to v0.37.0 and confirm Terragrunt still does not update the state buckets.

Special thanks

Special thanks to the following users for their contribution!

• @leonardobiffi

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2063

Description

Upgraded go-getter dependency to 1.5.11 with CVE-2022-29810 fixes

Special thanks

Special thanks to @dependabot for their contribution!

Related links

• https://github.com/gruntwork-io/terragrunt/pull/2095