github.com/paybyphone/terraform@v0.9.5-0.20170613192930-9706042ddd51/website/docs/commands/plan.html.markdown (about)

     1  ---
     2  layout: "docs"
     3  page_title: "Command: plan"
     4  sidebar_current: "docs-commands-plan"
     5  description: |-
     6    The `terraform plan` command is used to create an execution plan. Terraform performs a refresh, unless explicitly disabled, and then determines what actions are necessary to achieve the desired state specified in the configuration files. The plan can be saved using `-out`, and then provided to `terraform apply` to ensure only the pre-planned actions are executed.
     7  ---
     8  
     9  # Command: plan
    10  
    11  The `terraform plan` command is used to create an execution plan. Terraform
    12  performs a refresh, unless explicitly disabled, and then determines what
    13  actions are necessary to achieve the desired state specified in the
    14  configuration files. The plan can be saved using `-out`, and then provided
    15  to `terraform apply` to ensure only the pre-planned actions are executed.
    16  
    17  ## Usage
    18  
    19  Usage: `terraform plan [options] [dir-or-plan]`
    20  
    21  By default, `plan` requires no flags and looks in the current directory
    22  for the configuration and state file to refresh.
    23  
    24  If the command is given an existing saved plan as an argument, the
    25  command will output the contents of the saved plan. In this scenario,
    26  the `plan` command will not modify the given plan. This can be used to
    27  inspect a planfile.
    28  
    29  The command-line flags are all optional. The list of available flags are:
    30  
    31  * `-destroy` - If set, generates a plan to destroy all the known resources.
    32  
    33  * `-detailed-exitcode` - Return a detailed exit code when the command exits.
    34    When provided, this argument changes the exit codes and their meanings to
    35    provide more granular information about what the resulting plan contains:
    36    * 0 = Succeeded with empty diff (no changes)
    37    * 1 = Error
    38    * 2 = Succeeded with non-empty diff (changes present)
    39  
    40  * `-input=true` - Ask for input for variables if not directly set.
    41  
    42  * `-lock=true` - Lock the state file when locking is supported.
    43  
    44  * `-lock-timeout=0s` - Duration to retry a state lock.
    45  
    46  * `-module-depth=n` - Specifies the depth of modules to show in the output.
    47    This does not affect the plan itself, only the output shown. By default,
    48    this is -1, which will expand all.
    49  
    50  * `-no-color` - Disables output with coloring.
    51  
    52  * `-out=path` - The path to save the generated execution plan. This plan
    53    can then be used with `terraform apply` to be certain that only the
    54    changes shown in this plan are applied. Read the warning on saved
    55    plans below.
    56  
    57  * `-parallelism=n` - Limit the number of concurrent operation as Terraform
    58    [walks the graph](/docs/internals/graph.html#walking-the-graph).
    59  
    60  * `-refresh=true` - Update the state prior to checking for differences.
    61  
    62  * `-state=path` - Path to the state file. Defaults to "terraform.tfstate".
    63    Ignored when [remote state](/docs/state/remote.html) is used.
    64  
    65  * `-target=resource` - A [Resource
    66    Address](/docs/internals/resource-addressing.html) to target. Operation will
    67    be limited to this resource and its dependencies. This flag can be used
    68    multiple times.
    69  
    70  * `-var 'foo=bar'` - Set a variable in the Terraform configuration. This flag
    71    can be set multiple times. Variable values are interpreted as
    72    [HCL](/docs/configuration/syntax.html#HCL), so list and map values can be
    73    specified via this flag.
    74  
    75  * `-var-file=foo` - Set variables in the Terraform configuration from
    76     a [variable file](/docs/configuration/variables.html#variable-files). If
    77    "terraform.tfvars" is present, it will be automatically loaded first. Any
    78    files specified by `-var-file` override any values in a "terraform.tfvars".
    79    This flag can be used multiple times.
    80  
    81  ## Security Warning
    82  
    83  Saved plan files (with the `-out` flag) encode the configuration,
    84  state, diff, and _variables_. Variables are often used to store secrets.
    85  Therefore, the plan file can potentially store secrets.
    86  
    87  Terraform itself does not encrypt the plan file. It is highly
    88  recommended to encrypt the plan file if you intend to transfer it
    89  or keep it at rest for an extended period of time.
    90  
    91  Future versions of Terraform will make plan files more
    92  secure.