Skip to content

Terraforming Cloudflare #3270

Open
Open
Terraforming Cloudflare#3270
Assignees
UlisesGascon
Labels
infra

Description

@UlisesGascon
UlisesGascon
opened on Mar 30, 2023

Seems like there is traction to use Terraform to manage changes in Cloudflare. #3220.

I would love to discuss this idea further and take the lead on the initiative if we decide to move forward.

I am facing a similar challenge with my personal project, so I can create a minimum viable product and share it with the team to see how it would work in practice.

In the past, I have utilized Terraform in conjunction with Azure services and discovered it to be an exceptional solution for implementing infrastructure modifications through pull requests, thereby increasing transparency within the infrastructure.

Activity

  1. UlisesGascon
    added
    infra
    build-agenda
    on Mar 30, 2023
  2. UlisesGascon
    self-assigned this
    on Mar 30, 2023

  3. UlisesGascon commented on Apr 11, 2023

    @UlisesGascon
    UlisesGascon
    on Apr 11, 2023
    MemberAuthor

    As agreed in #3299 I will work on a personal POC that I will present to the team so we can understand the complexity and challenges in our organization.

    The most critical part is to avoid any disruption in the downloads related settings in Cloudflare.

    Note: I will re-include this issue in the agenda once the POC is ready

  4. UlisesGascon
    removed
    build-agenda
    on Apr 11, 2023

  5. UlisesGascon commented on May 25, 2023

    @UlisesGascon
    UlisesGascon
    on May 25, 2023
    MemberAuthor

    I finished the POC and it is working fine, if you are interested in review it... I can grant you access to the private repo and a short demo 15m (terraform basics, github actions changes, etc..) in video format.

    Based on the discussion in #3362

    Next steps

    • I will ask for Cloudflare permissions (read only) in the admin repo. Access to Cloudflare admin#800
    • I will ask for a new repository creation (initially private) in the admin repo.
    • I will check how to setup Terraform Cloud account with the @nodejs/build and document the process. Setup Terraform Cloud account #3370
    • I will fetch all the Cloudflare resources into the new repository, prepare the the Github pipelines and documentation (Read only token, no risk for Cloudflare current setup).

    After that we can decide

    • If we can make the repository open (as the DNS information seems not to be sensitive)
    • If we are happy with this solution and then promote the usage including a Write Token for trigger Cloudflare changes from Terraform files using Github Actions.

  6. richardlau commented on May 26, 2023

    @richardlau
    richardlau
    on May 26, 2023
    Member

    Do we need a Terraform Cloud account (vs running Terraform locally)?

  7. UlisesGascon commented on Jun 21, 2023

    @UlisesGascon
    UlisesGascon
    on Jun 21, 2023
    MemberAuthor

    Once #3391 is merged.

    Next Steps:

  8. UlisesGascon commented on Nov 29, 2023

    @UlisesGascon
    UlisesGascon
    on Nov 29, 2023
    MemberAuthor

    This is currently stopped until R2 migration is completed, as agreed on #3574

  9. flakey5 commented on Jun 30, 2025

    @flakey5
    flakey5
    on Jun 30, 2025
    Member

    This is currently stopped until R2 migration is completed

    Sorry to bump an old issue, but the R2 migration is pretty much complete.

  10. flakey5 commented on Dec 14, 2025

    @flakey5
    flakey5
    on Dec 14, 2025
    Member

    What are y'all's thoughts on continuing forward with this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

infra

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions