controller

May 6, 2026

Changes in this version

type CloudflareTunnelReconciler

+ APIReader client.Reader

May 4, 2026

Changes in this version

+ func LoadCredentials(ctx context.Context, c client.Client, factory CredentialFactory, ...) (cfclient.Credentials, *ctrl.Result, error)

+ type CredentialFactory interface

+ GetCredentials func(ctx context.Context, secretName, namespace string) (cfclient.Credentials, error)

May 3, 2026

Changes in this version

+ type ErrorRouting struct

+ Reason string

+ RequeueAfter time.Duration

+ ResetRemoteID bool

+ func ClassifyCloudflareError(err error) ErrorRouting

May 1, 2026

Changes in this version

+ var ErrUnownedPDB = stderrors.New("refusing to adopt PodDisruptionBudget not owned by this tunnel")

+ func BuildConnectorPodDisruptionBudget(tun *cloudflarev1alpha1.CloudflareTunnel) *policyv1.PodDisruptionBudget

type ConnectorResourceNames

+ PodDisruptionBudget string

Apr 26, 2026

Changes in this version

+ const AnnotationAdopt

+ const AnnotationConfigHash

+ const AnnotationHostnames

+ const AnnotationPort

+ const AnnotationPrefix

+ const AnnotationProxied

+ const AnnotationRegistryFor

+ const AnnotationScheme

+ const AnnotationTTL

+ const AnnotationTarget

+ const AnnotationTunnelRefNamespace

+ const AnnotationTunnelUpstream

+ const AnnotationValueTrue

+ const AnnotationZoneRef

+ const AnnotationZoneRefNamespace

+ const DefaultConnectorImage

+ const LabelManagedBy

+ const LabelSourceKind

+ const LabelSourceName

+ const LabelSourceNamespace

+ var ErrAmbiguousZone = errors.New("ambiguous CloudflareZone for hostname")

+ var ErrForeignTXTOwner = errors.New("record exists with foreign TXT owner")

+ var ErrInvalidTarget = errors.New("invalid cloudflare.io/target value")

+ var ErrNoGatewayAddress = errors.New("no Gateway address populated in status")

+ var ErrNoMatchingZone = errors.New("no CloudflareZone matches hostname")

+ var ErrNoServicePorts = errors.New("service has no ports")

+ var ErrPortNotFound = errors.New("port not found on Service")

+ var ErrSourceLabelsMissing = errors.New("managed CR is missing cloudflare.io/source-* labels")

+ var ErrTXTRegistryGap = errors.New("record exists without ownership TXT and source is not opted in to adopt")

+ var ErrUnownedDeployment = stderrors.New("refusing to adopt Deployment not owned by this tunnel")

+ func BuildConnectorConfigMap(tun *cloudflarev1alpha1.CloudflareTunnel, renderedConfig []byte, ...) *corev1.ConfigMap

+ func BuildConnectorDeployment(tun *cloudflarev1alpha1.CloudflareTunnel, configHash string) *appsv1.Deployment

+ func BuildConnectorServiceAccount(tun *cloudflarev1alpha1.CloudflareTunnel) *corev1.ServiceAccount

+ func ListZonesClusterWide(ctx context.Context, c client.Client) ([]cloudflarev1alpha1.CloudflareZone, error)

+ func MergeCloudflareAnnotations(parent, child map[string]string) map[string]string

+ func ReconcileConnectorAndRules(ctx context.Context, c client.Client, tun *cloudflarev1alpha1.CloudflareTunnel, ...) error

+ func ResolveZoneForHostname(hostname string, zones []cloudflarev1alpha1.CloudflareZone) (*cloudflarev1alpha1.CloudflareZone, error)

+ type AggregationResult struct

+ ConfigHash string

+ Decisions map[types.NamespacedName]RuleDecision

+ Rendered []byte

+ func Aggregate(rules []cloudflarev1alpha1.CloudflareTunnelRule, ...) AggregationResult

type CloudflareDNSRecordReconciler

+ Registry RegistryConfig

+ type ConnectorResourceNames struct

+ ConfigMap string

+ Deployment string

+ ServiceAccount string

+ func ConnectorNames(tun *cloudflarev1alpha1.CloudflareTunnel) ConnectorResourceNames

+ type HTTPRouteSourceReconciler struct

+ AffixConfig cfclient.AffixConfig

+ Recorder record.EventRecorder

+ TxtOwnerID string

+ func (r *HTTPRouteSourceReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)

+ func (r *HTTPRouteSourceReconciler) SetupWithManager(mgr ctrl.Manager) error

+ type RegistryAction string

+ const RegistryActionAdopt

+ const RegistryActionAdoptOrphan

+ const RegistryActionCreate

+ const RegistryActionReconcile

+ const RegistryActionRefuseForeignOwner

+ const RegistryActionRefuseNoTXT

+ func RegistryDecide(cfg RegistryConfig, existing *cfclient.DNSRecord, existingTXTContent string, ...) RegistryAction

+ type RegistryConfig struct

+ AffixConfig cfclient.AffixConfig

+ TxtEncryptAESKey []byte

+ TxtImportDecryptKeys [][]byte

+ TxtImportOwners []string

+ TxtOwnerID string

+ type RuleDecision struct

+ Message string

+ ResolvedBackend string

+ Status RuleDecisionStatus

+ type RuleDecisionStatus string

+ const RuleDuplicateHostname

+ const RuleIncluded

+ const RuleInvalid

+ type ServiceSourceReconciler struct

+ AffixConfig cfclient.AffixConfig

+ Recorder record.EventRecorder

+ TxtOwnerID string

+ func (r *ServiceSourceReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)

+ func (r *ServiceSourceReconciler) SetupWithManager(mgr ctrl.Manager) error

+ type TargetKind string

+ const TargetKindAddress

+ const TargetKindCNAME

+ const TargetKindTunnel

+ type TargetSpec struct

+ CNAME string

+ Kind TargetKind

+ Name string

+ func ParseTarget(raw string) (TargetSpec, error)

Apr 21, 2026

Changes in this version

+ var ErrZoneRefNotReady = errors.New("zone reference is not ready")

Mar 16, 2026

Changes in this version

+ func ResolveZoneID(ctx context.Context, k8sClient client.Client, namespace, zoneID string, ...) (string, error)

+ type CloudflareDNSRecordReconciler struct

+ ClientFactory *cfclient.ClientFactory

+ DNSClientFn func(apiToken string) cfclient.DNSClient

+ IPResolver *ipresolver.Resolver

+ Recorder record.EventRecorder

+ Scheme *runtime.Scheme

+ func (r *CloudflareDNSRecordReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)

+ func (r *CloudflareDNSRecordReconciler) SetupWithManager(mgr ctrl.Manager) error

+ type CloudflareRulesetReconciler struct

+ ClientFactory *cfclient.ClientFactory

+ Recorder record.EventRecorder

+ RulesetClientFn func(apiToken string) cfclient.RulesetClient

+ Scheme *runtime.Scheme

+ func (r *CloudflareRulesetReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)

+ func (r *CloudflareRulesetReconciler) SetupWithManager(mgr ctrl.Manager) error

+ type CloudflareTunnelReconciler struct

+ ClientFactory *cfclient.ClientFactory

+ Recorder record.EventRecorder

+ Scheme *runtime.Scheme

+ TunnelClientFn func(apiToken string) cfclient.TunnelClient

+ func (r *CloudflareTunnelReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)

+ func (r *CloudflareTunnelReconciler) SetupWithManager(mgr ctrl.Manager) error

+ type CloudflareZoneConfigReconciler struct

+ ClientFactory *cfclient.ClientFactory

+ Recorder record.EventRecorder

+ Scheme *runtime.Scheme

+ ZoneClientFn func(apiToken string) cfclient.ZoneClient

+ func (r *CloudflareZoneConfigReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)

+ func (r *CloudflareZoneConfigReconciler) SetupWithManager(mgr ctrl.Manager) error

+ type CloudflareZoneReconciler struct

+ ClientFactory *cfclient.ClientFactory

+ Recorder record.EventRecorder

+ Scheme *runtime.Scheme

+ ZoneLifecycleClientFn func(apiToken string) cfclient.ZoneLifecycleClient

+ func (r *CloudflareZoneReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)

+ func (r *CloudflareZoneReconciler) SetupWithManager(mgr ctrl.Manager) error