1# API & Data Sources
2 
3## Outputs and Exports
4 
5Export resource identifiers:
6 
7```typescript
8export const kvId = kv.id;
9export const bucketName = bucket.name;
10export const workerUrl = worker.subdomain;
11export const dbId = db.id;
12```
13 
14## Resource Dependencies
15 
16Implicit dependencies via outputs:
17 
18```typescript
19const kv = new cloudflare.WorkersKvNamespace("kv", {
20    accountId: accountId,
21    title: "my-kv",
22});
23 
24// Worker depends on KV (implicit via kv.id)
25const worker = new cloudflare.WorkerScript("worker", {
26    accountId: accountId,
27    name: "my-worker",
28    content: code,
29    kvNamespaceBindings: [{name: "MY_KV", namespaceId: kv.id}], // Creates dependency
30});
31```
32 
33Explicit dependencies:
34 
35```typescript
36const migration = new command.local.Command("migration", {
37    create: pulumi.interpolate`wrangler d1 execute ${db.name} --file ./schema.sql`,
38}, {dependsOn: [db]});
39 
40const worker = new cloudflare.WorkerScript("worker", {
41    accountId: accountId,
42    name: "worker",
43    content: code,
44    d1DatabaseBindings: [{name: "DB", databaseId: db.id}],
45}, {dependsOn: [migration]}); // Ensure migrations run first
46```
47 
48## Using Outputs with API Calls
49 
50```typescript
51const db = new cloudflare.D1Database("db", {accountId, name: "my-db"});
52 
53db.id.apply(async (dbId) => {
54    const response = await fetch(
55        `https://api.cloudflare.com/client/v4/accounts/${accountId}/d1/database/${dbId}/query`,
56        {method: "POST", headers: {"Authorization": `Bearer ${apiToken}`, "Content-Type": "application/json"},
57         body: JSON.stringify({sql: "CREATE TABLE users (id INT)"})}
58    );
59    return response.json();
60});
61```
62 
63## Custom Dynamic Providers
64 
65For resources not in provider:
66 
67```typescript
68import * as pulumi from "@pulumi/pulumi";
69 
70class D1MigrationProvider implements pulumi.dynamic.ResourceProvider {
71    async create(inputs: any): Promise<pulumi.dynamic.CreateResult> {
72        const response = await fetch(
73            `https://api.cloudflare.com/client/v4/accounts/${inputs.accountId}/d1/database/${inputs.databaseId}/query`,
74            {method: "POST", headers: {"Authorization": `Bearer ${inputs.apiToken}`, "Content-Type": "application/json"},
75             body: JSON.stringify({sql: inputs.sql})}
76        );
77        return {id: `${inputs.databaseId}-${Date.now()}`, outs: await response.json()};
78    }
79    async update(id: string, olds: any, news: any): Promise<pulumi.dynamic.UpdateResult> {
80        if (olds.sql !== news.sql) await this.create(news);
81        return {};
82    }
83    async delete(id: string, props: any): Promise<void> {}
84}
85 
86class D1Migration extends pulumi.dynamic.Resource {
87    constructor(name: string, args: any, opts?: pulumi.CustomResourceOptions) {
88        super(new D1MigrationProvider(), name, args, opts);
89    }
90}
91 
92const migration = new D1Migration("migration", {
93    accountId, databaseId: db.id, apiToken, sql: "CREATE TABLE users (id INT)",
94}, {dependsOn: [db]});
95```
96 
97## Data Sources
98 
99**Get Zone:**
100```typescript
101const zone = cloudflare.getZone({name: "example.com"});
102const zoneId = zone.then(z => z.id);
103```
104 
105**Get Accounts (via API):**
106Use Cloudflare API directly or custom dynamic resources.
107 
108## Import Existing Resources
109 
110```bash
111# Import worker
112pulumi import cloudflare:index/workerScript:WorkerScript my-worker <account_id>/<worker_name>
113 
114# Import KV namespace
115pulumi import cloudflare:index/workersKvNamespace:WorkersKvNamespace my-kv <namespace_id>
116 
117# Import R2 bucket
118pulumi import cloudflare:index/r2Bucket:R2Bucket my-bucket <account_id>/<bucket_name>
119 
120# Import D1 database
121pulumi import cloudflare:index/d1Database:D1Database my-db <account_id>/<database_id>
122 
123# Import DNS record
124pulumi import cloudflare:index/dnsRecord:DnsRecord my-record <zone_id>/<record_id>
125```
126 
127## Secrets Management
128 
129```typescript
130import * as pulumi from "@pulumi/pulumi";
131 
132const config = new pulumi.Config();
133const apiKey = config.requireSecret("apiKey"); // Encrypted in state
134 
135const worker = new cloudflare.WorkerScript("worker", {
136    accountId: accountId,
137    name: "my-worker",
138    content: code,
139    secretTextBindings: [{name: "API_KEY", text: apiKey}],
140});
141```
142 
143Store secrets:
144```bash
145pulumi config set --secret apiKey "secret-value"
146```
147 
148## Transform Pattern
149 
150Modify resource args before creation:
151 
152```typescript
153import {Transform} from "@pulumi/pulumi";
154 
155interface BucketArgs {
156    accountId: pulumi.Input<string>;
157    transform?: {bucket?: Transform<cloudflare.R2BucketArgs>};
158}
159 
160function createBucket(name: string, args: BucketArgs) {
161    const bucketArgs: cloudflare.R2BucketArgs = {
162        accountId: args.accountId,
163        name: name,
164        location: "auto",
165    };
166    const finalArgs = args.transform?.bucket?.(bucketArgs) ?? bucketArgs;
167    return new cloudflare.R2Bucket(name, finalArgs);
168}
169```
170 
171## v6.x Worker Versioning Resources
172 
173**Worker** - Container for versions:
174```typescript
175const worker = new cloudflare.Worker("api", {accountId, name: "api-worker"});
176export const workerId = worker.id;
177```
178 
179**WorkerVersion** - Immutable code + config:
180```typescript
181const version = new cloudflare.WorkerVersion("v1", {
182    accountId, workerId: worker.id,
183    content: fs.readFileSync("./dist/worker.js", "utf8"),
184    compatibilityDate: "2025-01-01",
185});
186export const versionId = version.id;
187```
188 
189**WorkersDeployment** - Active deployment with bindings:
190```typescript
191const deployment = new cloudflare.WorkersDeployment("prod", {
192    accountId, workerId: worker.id, versionId: version.id,
193    kvNamespaceBindings: [{name: "MY_KV", namespaceId: kv.id}],
194});
195```
196 
197**Use:** Advanced deployments (canary, blue-green). Most apps should use `WorkerScript` (auto-versioning).
198 
199---
200See: [README.md](./README.md), [configuration.md](./configuration.md), [patterns.md](./patterns.md), [gotchas.md](./gotchas.md)
201