Skip to content

feat: add cloudflare-core Pulumi project for multi-domain infrastructure#32

Open
nsheaps wants to merge 2 commits intomainfrom
claude/pulumi-iac-setup-b831O
Open

feat: add cloudflare-core Pulumi project for multi-domain infrastructure#32
nsheaps wants to merge 2 commits intomainfrom
claude/pulumi-iac-setup-b831O

Conversation

@nsheaps
Copy link
Copy Markdown
Owner

@nsheaps nsheaps commented Mar 24, 2026

Summary

  • Adds a new cloudflare-core/ Pulumi TypeScript project as the foundational Cloudflare infrastructure layer
  • Supports multi-domain DNS zone management (Cloudflare-registered + external registrar domains)
  • Scaffolds account-level Zero Trust Access (groups, applications, policies)
  • Adds per-zone routing rules via the modern Rulesets API (replaces legacy Page Rules)
  • All resources are config-driven via Pulumi.prod.yaml — no code changes needed to add domains, records, Access apps, or routing rules

Test plan

  • Run yarn install in cloudflare-core/
  • Run yarn typecheck to verify TypeScript compiles
  • Initialize stack: bin/pulumi-wrapper.sh -C cloudflare-core stack init prod
  • Import existing nsheaps.dev zone before first deploy
  • Run bin/pulumi-wrapper.sh -C cloudflare-core preview --stack prod to verify plan
  • Review TASKS.md for manual setup steps (API token permissions, zone imports, DNS migration from cloudflare-apps)

https://claude.ai/code/session_01HQkS6ChKg1gzCyr9EWRerj

nsheaps added 2 commits March 24, 2026 15:17
Scaffolds a new Pulumi TypeScript project covering:
- Multi-domain DNS zone management (Cloudflare-registered + external)
- Account-level Zero Trust Access (groups, applications, policies)
- Per-zone routing rules via modern Rulesets API
- DNS record management with proxied/unproxied support

Separate from cloudflare-apps (which handles app-specific resources
like workers and R2). This is the foundational infrastructure layer.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant