Cloud & IaC

Connects to each host of the group and runs the ping module, which confirms SSH access and a usable Python.

• ad-hoc
• connectivity

Runs the setup module on each host of the group and prints its facts, such as OS, network interfaces and memory.

• ad-hoc
• facts

Prints the names of all groups defined in the inventory, using the debug module on the local machine.

• inventory

Prints the hosts that belong to the group according to the inventory, without connecting to them.

• inventory

Runs the playbook in check mode, which reports what would change, with a diff of modified files, without touching the hosts.

• playbook
• dry-run

Executes the command with sudo on every host of the group, after prompting for the privilege escalation password.

• ad-hoc
• sudo

Executes the command on every host of the group through the command module, without a shell, and prints each host's output.

• ad-hoc
• remote

Executes the command on the group's hosts as listed in the given inventory file instead of the default one.

• ad-hoc
• inventory

Runs the playbook on the hosts listed in the given inventory file instead of the default one.

• playbook
• inventory

Runs the playbook but skips every task before the one with the given name.

• playbook

Runs the playbook with the given extra variable, which takes precedence over the values set in the inventory and roles.

• playbook
• variables

Runs the playbook with extra variables loaded from the file, which override every other variable source.

• playbook
• variables

Executes the plays and tasks of the playbook on the hosts they target, using the default inventory.

• playbook

Runs the playbook but only executes the tasks and roles labeled with one of the comma-separated tags.

• playbook
• tags

Starts a point-in-time snapshot of the volume, billed until it is deleted, and prints the snapshot ID.

• ec2
• ebs
• backup

Deletes the object at the given key, which is permanent unless versioning is enabled on the bucket.

• s3
• storage

Permanently deletes the volume and all its data; the volume must first be detached from any instance.

• ec2
• ebs

Copies the objects that are new or changed in the bucket into the directory, overwriting local files with the same name.

• s3
• sync

Prints every EBS volume in the current region as JSON, with its size, state and attachments.

• ec2
• ebs

Prints the ID, state, type and private IP of every instance in the current region as a table.

• ec2
• compute

Prints the prefixes and objects at the top level of the bucket, with their size and last modification date.

• s3
• storage

Prints the Amazon Machine Images owned by your account in the current region, as JSON.

• ec2
• ami

Prints the copy operations that the sync would perform, without transferring any file.

• s3
• sync
• dry-run

Prints the full description of the instance as JSON, including its state, type, IP addresses and tags.

• ec2
• compute

Copies the files that are new or changed in the directory to the bucket, overwriting objects with the same key but deleting nothing.

• s3
• sync

Syncs the directory to the bucket, skipping every path that matches the exclude pattern.

• s3
• sync

Prints every managed disk in the current subscription as a table, with its resource group, size and state.

• storage
• disks

Prints every virtual machine in the current subscription as a table, with its resource group and location.

• compute
• vm

Opens a browser to sign in to your Azure account and stores the credentials used by later az commands.

• auth

Prints the VM instances of the active project in all zones, with their zone, machine type, IP addresses and status.

• compute
• vm

Opens a browser to sign in to a Google account and stores the credentials used by later gcloud commands.

• auth

Adds the credentials of the cluster to your kubeconfig and makes it the current kubectl context.

• kubernetes
• gke

Makes the project the default for every later gcloud command run with the active configuration.

• config
• project

Prints the properties of the active configuration, such as the account, project and default region.

• config

Opens an SSH session on the instance, creating and installing an SSH key for your user on first use.

• compute
• ssh

Updates the Google Cloud CLI and all its installed components to the latest version.

• maintenance

Shows the plan for the current directory, then creates, updates or destroys resources to match the configuration once you confirm.

• apply

Deletes every resource tracked in the state of the current directory, after showing the plan and asking for confirmation.

• destroy
• cleanup

Compares the state with the real resources and shows the changes made outside Terraform, without proposing any update.

• plan
• drift

Rewrites the .tf files of the current directory and its subdirectories in the canonical style and prints the files it changed.

• format
• lint

Downloads the providers and modules and configures the state backend for the configuration in the current directory.

• setup

Limits the plan to the resource at the given address and to the resources it depends on.

• plan

Runs a plan with the given value for the input variable, overriding its default and any .tfvars file.

• plan
• variables

Compares the configuration with the real infrastructure and prints the resources that would be created, changed or destroyed.

• plan

Prints the plan that terraform destroy would run, listing every resource it would delete, without changing anything.

• plan
• destroy

Prints the plan as a stream of JSON messages, one per line, for tools and CI pipelines to parse.

• plan
• ci

Writes the plan to a file so that terraform apply can later execute exactly those changes.

• plan

Checks that the configuration files of the initialized directory are syntactically valid and internally consistent.

• lint