feat: Bump Terraform to 1.15.6 and add Terragrunt 1.0.8#9
Conversation
- Bump Terraform from 1.14.8 to 1.15.6 (latest stable) - Add Terragrunt 1.0.8 with SHA256SUMS checksum verification - Add Terragrunt shell completions via --install-autocomplete - Update .env.example and README.md with new versions and tool row Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
|
Warning Review limit reached
More reviews will be available in 16 minutes and 10 seconds. Learn how PR review limits work. Your organization has used up its prepaid credits, and credit purchases are no longer available. Enable the review add-on in the billing tab to keep reviews running — you're only billed for reviews past your plan's rate limits ($0.25/file). ⌛ How to resolve this issue?After more reviews become available, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans include higher PR review limits than trial, open-source, and free plans. In all cases, reviews become available again over time. During sustained high-volume PR review activity, CodeRabbit may temporarily slow when the next review becomes available. Please see our Fair Usage Limits Policy for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: Organization UI Review profile: ASSERTIVE Plan: Pro Plus Run ID: 📒 Files selected for processing (3)
📝 WalkthroughWalkthroughTerraform is bumped from 1.14.8 to 1.15.6 and Terragrunt 1.0.8 is added to the Dockerfile via binary download with SHA256 checksum verification, system install, smoke test, and bash completion. Matching version pins are added to ChangesTerraform Bump and Terragrunt Addition
Estimated code review effort🎯 2 (Simple) | ⏱️ ~10 minutes Suggested labels
Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@Dockerfile`:
- Around line 152-173: The Terragrunt installation RUN command contains a
pipeline (grep piped to awk to sha256sum) where intermediate failures could be
silently masked, particularly if grep fails to find the expected binary name in
the SHA256SUMS file. Add `set -o pipefail` at the very beginning of the RUN
command (before the first curl statement) to ensure that any failure in the grep
to awk to sha256sum pipeline chain halts the build immediately rather than
allowing silent failures to propagate. This addresses the robust error handling
requirement and makes the checksum verification more reliable.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: ASSERTIVE
Plan: Pro Plus
Run ID: 3a0d9307-1a09-422f-ab5a-0b9df715c24d
📒 Files selected for processing (4)
.env.exampleDockerfileREADME.mddocs/plans/2026-06-14-001-feat-terraform-bump-terragrunt-add-plan.md
📜 Review details
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (1)
- GitHub Check: Build and Push
🧰 Additional context used
🪛 dotenv-linter (4.0.0)
.env.example
[warning] 47-47: [UnorderedKey] The PACKER_VERSION key should go before the TERRAFORM_VERSION key
(UnorderedKey)
🪛 Hadolint (2.14.0)
Dockerfile
[warning] 163-163: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
(DL4006)
🔇 Additional comments (6)
Dockerfile (3)
142-142: LGTM!
461-467: LGTM!
163-173: Cross-file version consistency: Terraform 1.15.6 and Terragrunt 1.0.8 pinned correctly across Dockerfile and .env.example.Both tool versions are consistently pinned and verified as stable releases:
Dockerfile#L142:TERRAFORM_VERSION=1.15.6(released June 10, 2026).env.example#L46:TERRAFORM_VERSION=1.15.6Dockerfile#L161:TERRAGRUNT_VERSION=1.0.8(released June 10, 2026).env.example#L48:TERRAGRUNT_VERSION=1.0.8Both versions are confirmed as stable releases on their respective repositories with all required release assets available (Terraform zip packages for Linux architectures, Terragrunt Linux binaries for both amd64 and arm64).
.env.example (1)
17-19: LGTM!README.md (1)
18-18: LGTM!docs/plans/2026-06-14-001-feat-terraform-bump-terragrunt-add-plan.md (1)
1-119: LGTM!
Dockerfile ARG default is 1.33.1 (no v prefix, as documented in its comment). The .env.example had v1.33.1, which doubled the v in the download URL (vv1.33.1) and caused a 404 during docker build. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
If grep finds no match in SHA256SUMS (e.g., binary renamed upstream),
EXPECTED was empty and sha256sum -c would fail with a cryptic format error.
Added [ -n "${EXPECTED}" ] to fail fast with a clear error.
Note: set -o pipefail was considered but the base image uses dash (/bin/sh),
which does not support it. The explicit non-empty check is portable and
directly addresses the concern.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
1 participant
Summary
Bump Terraform from 1.14.8 to 1.15.6 and add Terragrunt 1.0.8 — the widely-used Terraform/OpenTofu wrapper — with SHA256SUMS checksum verification and shell completions.
What changed
--install-autocomplete, and a commented install block matching the Dockerfile's existing conventions. Placed after Terraform in the Dockerfile for logical grouping..env.exampleandREADME.mdreflect both changes.Post-Deploy Monitoring & Validation
build-and-push.yml) after merge — verify the multi-arch build completes and pushes to Docker Hubdocker pull taegost/devops-toolbox:latest && docker run --rm taegost/devops-toolbox:latest terragrunt --versionshould reportv1.0.8Summary by CodeRabbit
New Features
Updates