Cloudflare Workers Platform
Worker with KV/R2/D1 bindings, routes, custom domain, and secrets - full edge app scaffold.
Verification
Plan-validatedPassed: module logic verified on a mocked plan - inputs, validation rules, conditional creation and outputs resolve (no real provider, no cloud).
Conformance
- Static validation (fmt · validate · tflint)
- No applicable security policies for this provider
- Plan tests (mocked: validation rules · outputs)
Provenance
- SHA-256 checksum
- Cosign signature
Functional
- Live test pending (no cloud run yet)
Last verified 2026-06-28 · how we verify
Verify this download
cosign · sha-256Don't take our word for it. Every release is signed with cosign - check the bytes against our pinned public key before you trust them.
# 1. Our pinned public key - fetch once, trust out-of-band
curl -O https://www.iac-bazaar.com/cosign.pub
# 2. This module's Sigstore bundle
curl -o cloudflare-workers-platform-1.0.0.sigstore.json \
https://www.iac-bazaar.com/api/artifacts/cloudflare-workers-platform/signature
# 3. Verify the tarball you downloaded
cosign verify-blob \
--key cosign.pub \
--bundle cloudflare-workers-platform-1.0.0.sigstore.json \
cloudflare-workers-platform-1.0.0.tar.gz
# → Verified OK
# 4. (optional) confirm the checksum too
echo "c71841eb2f71914c1f13a329d4a798ce0b95ad1c06da49b4bcbde97706daf075 cloudflare-workers-platform-1.0.0.tar.gz" | sha256sum -cUse it from the registry
terraform · opentofumodule "workers_platform" {
source = "www.iac-bazaar.com/iac-bazaar/cloudflare-workers-platform/cloudflare"
version = "1.0.0"
}Paid module — needs a purchase (or a subscription that covers it) plus a registry token from /account/tokens. Full setup: registry docs.
Inputs & outputs
Create a free account to read this module's contract
The declared contract — every input name, type, default and description, plus every output — is shown to signed-in accounts, not to anonymous visitors.
A free account sees the contract of every Free module. This one is Premium, so its contract unlocks when you buy it.
Documentation
cloudflare-workers-platform
Worker with KV/R2/D1 bindings, routes, custom domain, and secrets — a full
edge app scaffold in one module call. Creates the Worker script plus the KV
namespaces, R2 buckets, and D1 databases it binds to, wires every binding by
name, and exposes the app on routes and/or custom domains. Built against the
auto-generated provider v5 schema. Works with Terraform and OpenTofu
(>= 1.6), Cloudflare provider >= 5.0, < 6.0.
Opinionated defaults:
- Observability (invocation logs) on, full head-sampling.
- ES-module Worker syntax by default; pinned
compatibility_date. - Secrets are bound as
secret_text(encrypted at Cloudflare) and marked sensitive in state; plain config goes inplain_text_vars. - Storage resources are named
<script_name>-<binding>unless overridden.
License
Commercial — IaC Bazaar EULA. © IaC Bazaar. Original work (not derived from a third-party module).
Usage code & full reference unlock after purchase
The complete copy-paste usage, the full input/output reference, and operational notes ship with your licence - shown here and bundled in the download.
- Usage
- Inputs
- Outputs
- Requirements & notes
Related modules
Azure Functions App
Function app (Flex Consumption or Premium) with storage, Application Insights, managed identity and VNet integration.
Cloud Run Function (gen2)
Event-driven or HTTP gen2 function with source upload, dedicated runtime SA and Eventarc trigger wiring.
Functions Application
Serverless Fn application with functions, provisioned concurrency, invoke logging and Events-rule trigger wiring.
Lambda Function (Packaged & Wired)
Lambda with execution role, log group, triggers, aliases, and zip/container packaging handled.
Step Functions State Machine
A Step Functions state machine (STANDARD or EXPRESS) with a least-privilege execution role, a managed CloudWatch log group, X-Ray tracing, and encryption at rest - working out of the box from a single name.