In the 0.10 release we added an opt-in mode where Terraform would prompt interactively for confirmation during apply. We made this opt-in to give those who wrap Terraform in automation some time to update their scripts to explicitly opt out of this behavior where appropriate. Here we switch the default so that a "terraform apply" with no arguments will -- if it computes a non-empty diff -- display the diff and wait for the user to type "yes" in similar vein to the "terraform destroy" command. This makes the commonly-used "terraform apply" a safe workflow for interactive use, so "terraform plan" is now mainly for use in automation where a separate planning step is used. The apply command remains non-interactive when given an explicit plan file. The previous behavior -- though not recommended -- can be obtained by explicitly setting the -auto-approve option on the apply command line, and indeed that is how all of the tests are updated here so that they can continue to run non-interactively.
3.0 KiB
layout | page_title | sidebar_current | description |
---|---|---|---|
docs | Command: apply | docs-commands-apply | The `terraform apply` command is used to apply the changes required to reach the desired state of the configuration, or the pre-determined set of actions generated by a `terraform plan` execution plan. |
Command: apply
The terraform apply
command is used to apply the changes required
to reach the desired state of the configuration, or the pre-determined
set of actions generated by a terraform plan
execution plan.
Usage
Usage: terraform apply [options] [dir-or-plan]
By default, apply
scans the current directory for the configuration
and applies the changes appropriately. However, a path to another configuration
or an execution plan can be provided. Explicit execution plans files can be
used to split plan and apply into separate steps within
automation systems.
The command-line flags are all optional. The list of available flags are:
-
-backup=path
- Path to the backup file. Defaults to-state-out
with the ".backup" extension. Disabled by setting to "-". -
-lock=true
- Lock the state file when locking is supported. -
-lock-timeout=0s
- Duration to retry a state lock. -
-input=true
- Ask for input for variables if not directly set. -
-auto-approve
- Skip interactive approval of plan before applying. -
-no-color
- Disables output with coloring. -
-parallelism=n
- Limit the number of concurrent operation as Terraform walks the graph. -
-refresh=true
- Update the state for each resource prior to planning and applying. This has no effect if a plan file is given directly to apply. -
-state=path
- Path to the state file. Defaults to "terraform.tfstate". Ignored when remote state is used. -
-state-out=path
- Path to write updated state file. By default, the-state
path will be used. Ignored when remote state is used. -
-target=resource
- A Resource Address to target. For more information, see the targeting docs fromterraform plan
. -
-var 'foo=bar'
- Set a variable in the Terraform configuration. This flag can be set multiple times. Variable values are interpreted as HCL, so list and map values can be specified via this flag. -
-var-file=foo
- Set variables in the Terraform configuration from a variable file. If aterraform.tfvars
or any.auto.tfvars
files are present in the current directory, they will be automatically loaded.terraform.tfvars
is loaded first and the.auto.tfvars
files after in alphabetical order. Any files specified by-var-file
override any values set automatically from files in the working directory. This flag can be used multiple times.