Cloudflare R2 Bucket

Deploys a Cloudflare R2 object storage bucket together with its bucket-scoped configuration: location and jurisdiction, default storage class, managed (r2.dev) public access, custom domains, CORS, object lifecycle, and object lock. Custom domains integrate with CloudflareDnsZone via foreign-key references.

What Gets Created

When you deploy a CloudflareR2Bucket resource, OpenMCF provisions:

• R2 Bucket — a cloudflare_r2_bucket in the specified account, with the configured location hint, jurisdiction, and default storage class.
• Managed Public Domain — when publicAccess is true, a cloudflare_r2_managed_domain enabling the bucket's r2.dev URL (published as the public_url output).
• Custom Domains — one cloudflare_r2_custom_domain per enabled entry in customDomains, serving the bucket over your own hostnames.
• CORS — a cloudflare_r2_bucket_cors when cors.rules are provided.
• Lifecycle — a cloudflare_r2_bucket_lifecycle when lifecycle.rules are provided (storage-class transitions, object expiration, multipart-upload cleanup).
• Object Lock — a cloudflare_r2_bucket_lock when lock.rules are provided (write-once retention).

Prerequisites

• Cloudflare credentials configured via environment variables or OpenMCF provider config
• A Cloudflare account ID (32-character hex string) with R2 enabled
• A Cloudflare DNS zone for any custom domain (the domain must be within that zone)

Quick Start

apiVersion: cloudflare.openmcf.org/v1
kind: CloudflareR2Bucket
metadata:
  name: my-bucket
spec:
  bucketName: my-app-assets
  accountId: 0a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d
  location: wnam

openmcf apply -f r2-bucket.yaml

Configuration Reference

Required Fields

Optional Fields

Example: public bucket with custom domain and CORS

apiVersion: cloudflare.openmcf.org/v1
kind: CloudflareR2Bucket
metadata:
  name: media-bucket
spec:
  bucketName: prod-media-assets
  accountId: 0a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d
  location: weur
  publicAccess: true
  customDomains:
    - enabled: true
      zoneId:
        valueFrom:
          kind: CloudflareDnsZone
          name: my-zone
          field: status.outputs.zone_id
      domain: media.example.com
      minTls: "1.2"
  cors:
    rules:
      - allowed:
          methods: [GET, HEAD]
          origins: ["https://app.example.com"]
        maxAgeSeconds: 3600

Stack Outputs

After deployment, these outputs are available in status.outputs:

Related Components

• CloudflareDnsZone — provides the DNS zone referenced by customDomains[].zoneId
• CloudflareWorker — commonly deployed alongside R2 to handle object transformations or access control
• CloudflareKvNamespace — key-value storage often paired with R2 for metadata indexing