[Tunnel] Set config_src in Terraform deployment

michielappelman · web-flow · commit e40dc6d60619 · 2025-07-30T16:36:26.000+02:00
The creation of a remotely-managed Cloudflare Tunnel in Terraform requires setting the config_src to 'cloudflare', because the default is 'local'.
diff --git a/src/content/docs/cloudflare-one/connections/connect-networks/deployment-guides/terraform.mdx b/src/content/docs/cloudflare-one/connections/connect-networks/deployment-guides/terraform.mdx
@@ -228,7 +228,7 @@ The following configuration will modify settings in your Cloudflare account.
 		resource "cloudflare_zero_trust_tunnel_cloudflared" "gcp_tunnel" {
 			account_id = var.cloudflare_account_id
 			name       = "Terraform GCP tunnel"
-			secret     = random_bytes.tunnel_secret.base64
+			config_src = "cloudflare"
 		}
 
 		# Creates the CNAME record that routes http_app.${var.cloudflare_zone} to the tunnel.

Original file line number	Diff line number	Diff line change
`@@ -228,7 +228,7 @@ The following configuration will modify settings in your Cloudflare account.`
`228`	`228`	`resource "cloudflare_zero_trust_tunnel_cloudflared" "gcp_tunnel" {`
`229`	`229`	`account_id = var.cloudflare_account_id`
`230`	`230`	`name = "Terraform GCP tunnel"`
`231`		`- secret = random_bytes.tunnel_secret.base64`
	`231`	`+ config_src = "cloudflare"`
`232`	`232`	`}`
`233`	`233`
`234`	`234`	`# Creates the CNAME record that routes http_app.${var.cloudflare_zone} to the tunnel.`