Skip to content

Commit 762fd33

Browse files
markjmillerkorinneirvinebroque
authored
changelog: add workers terraform, api, and smart placement fixes (#22149)
Co-authored-by: markmiller <[email protected]> Co-authored-by: Korinne Alpers <[email protected]> Co-authored-by: Brendan Irvine-Broque <[email protected]>
1 parent f6da9a0 commit 762fd33

File tree

4 files changed

+126
-0
lines changed

4 files changed

+126
-0
lines changed

‎src/content/changelog/fundamentals/2025-03-21-resource-force-replacement-bug.mdx‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
---
2+
title: Dozens of Cloudflare Terraform Provider resources now have proper drift detection
3+
description: Improper drift detection in the Cloudflare Terraform Provider resulted in dozens of resources always indicating they needed to be updated or replaced.
4+
products:
5+
- fundamentals
6+
date: 2025-03-21T00:00:00Z
7+
---
8+
9+
In [Cloudflare Terraform Provider](https://github.com/cloudflare/terraform-provider-cloudflare) versions 5.2.0 and above, dozens of resources now have proper drift detection. Before this fix, these resources would indicate they needed to be updated or replaced — even if there was no real change. Now, you can rely on your `terraform plan` to only show what resources are expected to change.
10+
11+
This issue affected [resources](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs) related to these products and features:
12+
13+
- API Shield
14+
- Argo Smart Routing
15+
- Argo Tiered Caching
16+
- Bot Management
17+
- BYOIP
18+
- D1
19+
- DNS
20+
- Email Routing
21+
- Hyperdrive
22+
- Observatory
23+
- Pages
24+
- R2
25+
- Rules
26+
- SSL/TLS
27+
- Waiting Room
28+
- Workers
29+
- Zero Trust

‎src/content/changelog/fundamentals/2025-03-21-sensitive-values-redacted.mdx‎

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
---
2+
title: Cloudflare Terraform Provider now properly redacts sensitive values
3+
description: Resources in the Cloudflare Terraform Provider that have sensitive properties will not show those values in logs.
4+
products:
5+
- fundamentals
6+
date: 2025-03-21T00:00:00Z
7+
---
8+
9+
In the [Cloudflare Terraform Provider](https://github.com/cloudflare/terraform-provider-cloudflare) versions 5.2.0 and above, sensitive properties of resources are redacted in logs. Sensitive properties in [Cloudflare's OpenAPI Schema](https://raw.githubusercontent.com/cloudflare/api-schemas/refs/heads/main/openapi.yaml) are now annotated with `x-sensitive: true`. This results in proper auto-generation of the corresponding Terraform resources, and prevents sensitive values from being shown when you run Terraform commands.
10+
11+
This issue affected [resources](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs) related to these products and features:
12+
13+
- Alerts and Audit Logs
14+
- Device API
15+
- DLP
16+
- DNS
17+
- Magic Visibility
18+
- Magic WAN
19+
- TLS Certs and Hostnames
20+
- Tunnels
21+
- Turnstile
22+
- Workers
23+
- Zaraz

‎src/content/changelog/workers/2025-03-22-smart-placement-stablization.mdx‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
---
2+
title: Smart Placement is smarter about running Workers and Pages Functions in the best locations
3+
description: Workers and Pages Functions with Smart Placement enabled will not unexpectedly return to default locations if request traffic dips.
4+
products:
5+
- workers
6+
- pages
7+
date: 2025-03-22T00:00:00Z
8+
---
9+
10+
[Smart Placement](/workers/configuration/smart-placement/) is a unique Cloudflare feature that can make decisions to move your Worker to run in a more optimal location (such as closer to a database). Instead of always running in the default location (the one closest to where the request is received), Smart Placement uses certain “heuristics” (rules and thresholds) to decide if a different location might be faster or more efficient.
11+
12+
Previously, if these heuristics weren't consistently met, your Worker would revert to running in the default location—even after it had been optimally placed. This meant that if your Worker received minimal traffic for a period of time, the system would reset to the default location, rather than remaining in the optimal one.
13+
14+
Now, once Smart Placement has identified and assigned an optimal location, temporarily dropping below the heuristic thresholds will not force a return to default locations. For example in the previous algorithm, a drop in requests for a few days might return to default locations and heuristics would have to be met again. This was problematic for workloads that made requests to a geographically located resource every few days or longer. In this scenario, your Worker would never get placed optimally. This is no longer the case.

‎src/content/changelog/workers/2025-04-15-workers-api-fixes.mdx‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
---
2+
title: Fixed and documented Workers Routes and Secrets API
3+
description: The Workers Routes API now returns a correct response and the Secrets API has been added to the Cloudflare API docs.
4+
products:
5+
- workers
6+
- workers-for-platforms
7+
date: 2025-04-15T00:00:00Z
8+
---
9+
10+
## Workers Routes API
11+
12+
Previously, a request to the Workers [Create Route API](/api/resources/workers/subresources/routes/methods/create/) always returned `null` for "script" and an empty string for "pattern" even if the request was successful.
13+
14+
```bash title="Example request"
15+
curl https://api.cloudflare.com/client/v4/zones/$CF_ACCOUNT_ID/workers/routes \
16+
-X PUT \
17+
-H "Authorization: Bearer $CF_API_TOKEN" \
18+
-H 'Content-Type: application/json' \
19+
--data '{ "pattern": "example.com/*", "script": "hello-world-script" }'
20+
```
21+
22+
```json title="Example bad response"
23+
{
24+
"result": {
25+
"id": "bf153a27ba2b464bb9f04dcf75de1ef9",
26+
"pattern": "",
27+
"script": null,
28+
"request_limit_fail_open": false
29+
},
30+
"success": true,
31+
"errors": [],
32+
"messages": []
33+
}
34+
```
35+
36+
Now, it properly returns all values!
37+
38+
```json title="Example good response"
39+
{
40+
"result": {
41+
"id": "bf153a27ba2b464bb9f04dcf75de1ef9",
42+
"pattern": "example.com/*",
43+
"script": "hello-world-script",
44+
"request_limit_fail_open": false
45+
},
46+
"success": true,
47+
"errors": [],
48+
"messages": []
49+
}
50+
```
51+
52+
## Workers Secrets API
53+
54+
The [Workers](/api/resources/workers/subresources/scripts/subresources/secrets/) and [Workers for Platforms](/api/resources/workers_for_platforms/subresources/dispatch/subresources/namespaces/subresources/scripts/subresources/secrets/) secrets APIs are now properly documented in the Cloudflare OpenAPI docs. Previously, these endpoints were not publicly documented, leaving users confused on how to directly manage their secrets via the API. Now, you can find the proper endpoints in our public documentation, as well as in our API Library SDKs such as [cloudflare-typescript](https://github.com/cloudflare/cloudflare-typescript) (>4.2.0) and [cloudflare-python](https://github.com/cloudflare/cloudflare-python) (>4.1.0).
55+
56+
Note the `cloudflare_workers_secret` and `cloudflare_workers_for_platforms_script_secret` [Terraform resources](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs) are being removed in a future release. This resource is not recommended for managing secrets. Users should instead use the:
57+
58+
- [Secrets Store](/api/resources/secrets_store/) with the "Secrets Store Secret" binding on Workers and Workers for Platforms Script Upload
59+
- "Secret Text" Binding on [Workers Script Upload](/api/resources/workers/subresources/scripts/methods/update/) and [Workers for Platforms Script Upload](/api/resources/workers_for_platforms/subresources/dispatch/subresources/namespaces/subresources/scripts/methods/update/)
60+
- Workers (and WFP) Secrets API

0 commit comments

Comments
 (0)