These flags apply to plan, apply, destroy, and related commands:
Flag
Default
Description
--env <name>
default
Environment workspace (dev, staging, prod)
--config <path>
./infrastructure.ts
Config file path
--auto-approve
false
Skip confirmation prompt
--dry-run
false
Show plan without applying
--passphrase <phrase>
—
Passphrase for encrypted state
--json
false
plan: print the redacted plan as JSON. Also used by output / schema.
--out <path>
—
Save plan to a file (plan command)
--plan <path>
—
Load plan from a file (apply command)
--force-stale-plan
false
Apply a saved plan even if state serial or config hash no longer match
--target <selector>
—
plan/apply: matching resources plus ancestors. destroy: matching resources plus dependents. Selector is an exact id, an id glob (vm-*), or tags.key=value. Repeatable.
--exclude <selector>
—
Omit matching resources (id, glob, or tags.key=value). Errors if live dependents remain.