Skip to content
Terragrunt Logo
Pipelines IconHeadphones Icon

Completed Strict Controls

These strict controls have been completed and are no longer needed. The features they controlled have been fully removed or the behavior is now the default.

apply-all

Status: Completed - This command has been completely removed from Terragrunt.

Reason: The apply-all command was deprecated and has now been removed as part of the deprecation schedule. Use terragrunt run --all apply instead.

destroy-all

Status: Completed - This command has been completely removed from Terragrunt.

Reason: The destroy-all command was deprecated and has now been removed as part of the deprecation schedule. Use terragrunt run --all destroy instead.

double-star

Status: Completed - The ** glob pattern now matches all subdirectories regardless of depth by default.

The ** glob pattern in queue-exclude-dir and queue-include-dir now matches all subdirectories regardless of depth, and **/* matches subdirectories with a depth of at least one. This behavior is now the default and this strict control is no longer needed.

legacy-all

Status: Completed - The legacy *-all commands have been removed from Terragrunt.

This control was previously used to throw an error when using any of the legacy commands that were replaced by run-all. These commands have now been completely removed from Terragrunt as part of the deprecation schedule.

Previously controlled commands (now removed):

  • plan-all - Use terragrunt run --all plan instead
  • apply-all - Use terragrunt run --all apply instead
  • destroy-all - Use terragrunt run --all destroy instead
  • output-all - Use terragrunt run --all output instead
  • validate-all - Use terragrunt run --all validate instead
  • spin-up - Use terragrunt run --all apply instead
  • tear-down - Use terragrunt run --all destroy instead

legacy-base64gzip

Stops base64gzip() from returning the gzip bytes produced by Terragrunt v1.1.3 and earlier. The v1.1.3 bytes are restored by default with a deprecation warning. Enable this control to use the current Go encoder and silence the warning.

legacy-base64gzip - Reason

Terragrunt v1.1.4 was built with Go 1.27, which changed the compressed bytes its gzip encoder produces. The bytes still decompress to the same content, but base64gzip() returned a different string for the same input, and a resource that compares the encoded value, such as an EC2 instance with user_data_base64 and user_data_replace_on_change = true, planned a replacement.

Since v1.1.5, base64gzip() returns the v1.1.3 bytes again, so upgrading from v1.1.3 or earlier plans no change. Enable this control to take the current Go encoder before Terragrunt 1.2 makes it the default:

Terminal window
terragrunt run plan --strict-control legacy-base64gzip

Where the encoded value must not change, call base64gzip_compat() instead of base64gzip(). It requires the base64gzip-compat experiment.

output-all

Status: Completed - This command has been completely removed from Terragrunt.

Reason: The output-all command was deprecated and has now been removed as part of the deprecation schedule. Use terragrunt run --all output instead.

plan-all

Status: Completed - This command has been completely removed from Terragrunt.

Reason: The plan-all command was deprecated and has now been removed as part of the deprecation schedule. Use terragrunt run --all plan instead.

require-explicit-bootstrap

Status: Completed - Backend provisioning is no longer performed automatically by default.

Terragrunt now requires explicit opt-in to bootstrap backend infrastructure. Use terragrunt backend bootstrap or pass --backend-bootstrap to a run command (e.g., terragrunt run apply --backend-bootstrap) to provision or update backend resources referenced by the remote_state block.

This strict control is no longer necessary because the default behavior already requires explicit bootstrapping.

skip-dependencies-inputs

Status: Completed - Dependency inputs are now disabled by default.

Reading inputs from dependencies has been deprecated and is now disabled by default for performance. Use dependency outputs instead.

spin-up

Status: Completed - This command has been completely removed from Terragrunt.

Reason: The spin-up command was deprecated and has now been removed as part of the deprecation schedule. Use terragrunt run --all apply instead.

tear-down

Status: Completed - This command has been completely removed from Terragrunt.

Reason: The tear-down command was deprecated and has now been removed as part of the deprecation schedule. Use terragrunt run --all destroy instead.

terragrunt-prefix-flags

Status: Completed - The --terragrunt- prefix for flags has been removed from Terragrunt.

Reason: The --terragrunt- prefix for flags is no longer necessary, due to the work in RFC #3445. Use the flag name without the prefix instead (e.g., --non-interactive instead of --terragrunt-non-interactive).

validate-all

Status: Completed - This command has been completely removed from Terragrunt.

Reason: The validate-all command was deprecated and has now been removed as part of the deprecation schedule. Use terragrunt run --all validate instead.