This is the source for my personal blog.
Purchase R2:
Within https://dash.cloudflare.com/<ACCOUNT_ID>/r2/plans,
Under “Get started with R2”, click “Purchase R2 Plan”.
Generate an S3 Auth token:
Within https://dash.cloudflare.com/<ACCOUNT_ID>/r2/api-tokens,
click “Create API token”.
Generate an API Token: within profile api tokens, create an api token with permissions:
- Account; Workers Scripts; Edit. (cloudflare_worker_script)
- Zone; DNS; Edit. (cloudflare_record)
- Zone; SSL and Certificates; Edit. (cloudflare_certificate_pack)
- Zone; Workers Routes; Edit. (cloudflare_worker_route)
terraform-provider-cloudflare does not support updating Registrar Domains so that has to be created using the gui.
deploy.yaml depends on several secrets:
CLOUDFLARE_ACCOUNT_IDCLOUDFLARE_API_TOKENAPI Token described aboveCLOUDFLARE_R2_ACCESS_KEY_IDandCLOUDFLARE_R2_SECRET_ACCESS_KEY: S3-compatible S3 Auth token described aboveARTIFACT_ENCRYPTION_PASSWORD: any random password to encrypt the secret tfplan within the artifact. I usedopenssl rand -base64 32to generate one.