terragrunt

Updated CLI args, config attributes and blocks

• include [block]

Description

Fix bug where exposing include did not work when referencing in locals blocks.

Related links

https://github.com/gruntwork-io/terragrunt/issues/1721
https://github.com/gruntwork-io/terragrunt/pull/1723

Updated CLI args, config attributes and blocks

• include [block]

Description

You can now access values from included config. E.g., if you want to access a local var region defined in the parent terragrunt config, you can reference include.locals.region in the child config.

Note that there are a few limitations/differences with read_terragrunt_config:

• include references do not include fetched dependencies. This will change in the future.
• include references are not automatically available. You must set the new expose attribute to true to access the included references.
• At the moment, you can only have a single include block in the child, and you can only include one level deep (no nested includes). This will change in the future.

(This is the first of several features that implement the Imports RFC)

Related links

https://github.com/gruntwork-io/terragrunt/issues/1566
https://github.com/gruntwork-io/terragrunt/pull/1716

Updated CLI args, config attributes and blocks

• run-all [command]

Description

Improved error messaging when multiple errors are returned.

Special thanks

Special thanks to @derom for their contribution!

Related links

https://github.com/gruntwork-io/terragrunt/pull/1703

Updated CLI args, config attributes and blocks

• aws-provider-patch (command)

Description

Improve error messages in aws-provider-patch when the json input is malformed.

Related links

https://github.com/gruntwork-io/terragrunt/pull/1715

Updated CLI args, config attributes and blocks

• hclfmt (command)

Description

Updated documentation and help text in hclfmt command to clarify that it works on all files with hcl extension, not just terragrunt.hcl.

Special thanks

Special thanks to @edgarsandi for their contribution!

Related links

https://github.com/gruntwork-io/terragrunt/pull/1713

Updated CLI args, config attributes and blocks

• aws-provider-patch (command)

Description

aws-provider-patch now supports additional data types. Previously aws-provider-patch only supported patching strings, which made it impossible to patch provider attributes that are not strings (e.g., the allowed_account_ids attribute of the aws provider, which is list(string) type).

Note that to support this, the aws-provider-patch now expects attribute values to be json encoded when passed in. That means that you need to quote the values in order for it to work. For example, if you previously ran:

terragrunt aws-provider-patch --terragrunt-override-attr region=us-east-2

you need to update the call to:

terragrunt aws-provider-patch --terragrunt-override-attr 'region="us-east-2"'

Related links

https://github.com/gruntwork-io/terragrunt/pull/1714
https://github.com/gruntwork-io/terragrunt/issues/1709

Updated CLI args, config attributes and blocks

• yamldecode (helper function)

Description

Fix bug where yamldecode is unable decode certain forms of yaml.

Special thanks

Special thanks to @andreykaipov for the contribution!

Related links

https://github.com/gruntwork-io/terragrunt/pull/1706

Updated CLI args, config attributes and blocks

• --terragrunt-include-external-dependencies

Description

You can now configure the --terragrunt-include-external-dependencies setting via the environment variable TERRAGRUNT_INCLUDE_EXTERNAL_DEPENDENCIES.

Special thanks

Special thanks to @elebertus for the contribution!

Related links

https://github.com/gruntwork-io/terragrunt/pull/1548

Updated CLI args, config attributes and blocks

• --terragrunt-debug

Description

You can now control the --terragrunt-debug flag using the TERRAGRUNT_DEBUG environment variable.

Related links

https://github.com/gruntwork-io/terragrunt/pull/1698

Updated CLI args, config attributes and blocks

• iam_role

Description

Fix a bug where Terragrunt would not properly assume the IAM role specified via the iam_role parameter if you were using AWS SSO.

Special thanks

Thank you to @stevie- for the contribution!

Related links

• https://github.com/gruntwork-io/terragrunt/pull/1689

Updated CLI args, config attributes and blocks

• --help

Description

Update the usage text for Terragrunt to reflect that options should go after the command. There should be no impact on Terragrunt's behavior in this release.

Special thanks

Thank you to @Tarasovych for the contribution!

Related links

• https://github.com/gruntwork-io/terragrunt/pull/1687

Updated CLI args, config attributes and blocks

• --terragrunt-source-map [CLI Arg]

Description

You can now configure the Terragrunt source map option using the environment variable TERRAGRUNT_SOURCE_MAP. You can configure multiple mappings using comma separated value encoding. For example, the following configures three mappings:

github.com/org/modules.git=/local/path/to/modules,gitlab.com/org-lab/modules.git=/local/path/to/modules,bitbucket.org/bitorg/modules.git=/local/path/to/modules,gitlab.com/org-lab/modules.git=/local/path/to/modules

Related links

• https://github.com/gruntwork-io/terragrunt/pull/1676

Updated CLI args, config attributes and blocks

• --terragrunt-iam-assume-role-duration [new CLI Arg]
• iam_assume_role_duration [new config]

Description

You can now use the new CLI arg and config setting to configure the duration for the IAM role from --terragrunt-iam-role.

Special thanks

Thank you to @thehunt33r for the contribution!

Related links

• https://github.com/gruntwork-io/terragrunt/pull/1673

Updated CLI args, config attributes and blocks

• --terragrunt-source-map [CLI Arg]

Description

This release introduces --terragrunt-source-map, which can be used to provide multiple mappings to translate terragrunt source URLs in the config with another path. See the documentation for more information.

Related links

• https://github.com/gruntwork-io/terragrunt/pull/1674

Updated CLI args, config attributes and blocks

• get_aws_account_id [func]
• get_aws_caller_identity_arn [func]
• get_aws_caller_identity_user_id [func]

Description

• Fixes bug where the default credentials chain for the get_aws_** functions ignored the config file (~/.aws/config).

Related links

• https://github.com/gruntwork-io/terragrunt/pull/1663

Updated CLI args, config attributes and blocks

• remote_state ; s3

Description

• Fixes bug where AWS profile based authentication was not fully honored when automatic s3 bucket creation was happening.

Related links

• https://github.com/gruntwork-io/terragrunt/issues/1650
• https://github.com/gruntwork-io/terragrunt/pull/1654

Updated CLI args, config attributes and blocks

• (none)

Description

• Update Terragrunt to work with Terraform 0.15. There are no code or behavior changes, but marking this release as incompatible because from this release onwards, we are only testing with Terraform 0.15 and up.

Related links

• https://github.com/gruntwork-io/terragrunt/pull/1651

Updated CLI args, config attributes and blocks

• skip_bucket_versioning

Description

• If skip_bucket_versioning is set to true, and you are using GCS as a backend, Terragrunt will not only not enable versioning automatically, but now it will also no longer try to check if versioning is enabled either.

Special thanks

• Thank you to @davidalger for the fix!

Related links

• https://github.com/gruntwork-io/terragrunt/pull/1610

Updated CLI args, config attributes and blocks

• get_terraform_commands_that_need_locking()

Description

• Remove init from the list of commands returned by get_terraform_commands_that_need_locking(), as init does not support locking, and as of Terraform 0.15, will exit with an error if you try to use the lock parameters with it.

Special thanks

• Thank you to @grimm26 for the fix!

Related links

• https://github.com/gruntwork-io/terragrunt/pull/1642

Updated CLI args, config attributes and blocks

• sops_decrypt_file()

Description

• Updated the versions of sops, aws-sdk-go, and vault libraries that we depend on. As a result, the sops_decrypt_file() function should now work with data encrypted via HashiCorp Vault.

Special thanks

• Thank you to @teamfighter for the contribution!

Related links

• https://github.com/gruntwork-io/terragrunt/pull/1564