Terraform-provider-cloudflare: Creating a zone with CLOUDFLARE_API_TOKEN and CLOUDFLARE_ACCOUNT_ID gives 403: Authentication error

Created on 14 Jun 2021 · 9Comments · Source: cloudflare/terraform-provider-cloudflare

Confirmation

[X] My issue isn't already found on the issue tracker.
[X] I have replicated my issue using the latest version of the provider and it is still present.

Terraform and Cloudflare provider version

Creating a zone with CLOUDFLARE_API_TOKEN and CLOUDFLARE_ACCOUNT_ID auth method gives 403: Authentication error
Screen Shot 2021-06-14 at 13 33 56
The result gives the zone created but not registed in terraform state

The token provided
Screen Shot 2021-06-14 at 13 27 48

Affected resource(s)

Zone creation with Api token

Terraform configuration files

resource "cloudflare_zone" "zoneofproof-com" {
  paused = "false"
  plan   = "free"
  type   = "full"
  zone   = "zoneofproof.com"
}

Debug output

n/a

Panic output

cloudflare_zone.zoneofproof-com: Creating...

Error: Error setting plan free for zone "8b4c5dcc9a4bba197bcde43dbe26e70f": HTTP status 403: Authentication error (10000)

on zones.tf line 1, in resource "cloudflare_zone" "zoneofproof-com":
1: resource "cloudflare_zone" "zoneofproof-com" {

Expected output

cloudflare_zone.zoneofproof-com: Creating...
cloudflare_zone.zoneofproof-com: Creation complete after 2s [id=8b4c5dcc9a4bba197bcde43dbe26e70f]

Apply complete! Resources: 1 added, 0 changed, 0 destroyed.

Actual output

cloudflare_zone.zoneofproof-com: Creating...

Error: Error setting plan free for zone "8b4c5dcc9a4bba197bcde43dbe26e70f": HTTP status 403: Authentication error (10000)

on zones.tf line 1, in resource "cloudflare_zone" "zoneofproof-com":
1: resource "cloudflare_zone" "zoneofproof-com" {

Steps to reproduce

export CLOUDFLARE_ACCOUNT_ID=
export CLOUDFLARE_API_TOKEN=*
terraform apply

Additional factoids

n/a

References

n/a

kinbug needs-triage

Source

zahidferz

All 9 comments

can you please include the untruncated TF_LOG=DEBUG output here? feel free to redact any sensitive credentials but leave the logs as is.

jacobbednarz on 14 Jun 2021

👍1

terraform apply
2021/06/14 15:39:18 [WARN] Log levels other than TRACE are currently unreliable, and are supported only for backward compatibility.
  Use TF_LOG=TRACE to see Terraform's internal logs.
  ----
2021/06/14 15:39:18 [INFO] Terraform version: 0.14.7
2021/06/14 15:39:18 [INFO] Go runtime version: go1.15.6
2021/06/14 15:39:18 [INFO] CLI args: []string{"/Users/z/.asdf/installs/terraform/0.14.7/bin/terraform", "apply"}
2021/06/14 15:39:18 [DEBUG] Attempting to open CLI config file: /Users/z/.terraformrc
2021/06/14 15:39:18 [DEBUG] File doesn't exist, but doesn't need to. Ignoring.
2021/06/14 15:39:18 [DEBUG] ignoring non-existing provider search directory terraform.d/plugins
2021/06/14 15:39:18 [DEBUG] ignoring non-existing provider search directory /Users/z/.terraform.d/plugins
2021/06/14 15:39:18 [DEBUG] ignoring non-existing provider search directory /Users/z/Library/Application Support/io.terraform/plugins
2021/06/14 15:39:18 [DEBUG] ignoring non-existing provider search directory /Library/Application Support/io.terraform/plugins
2021/06/14 15:39:18 [INFO] CLI command args: []string{"apply"}
2021/06/14 15:39:18 [WARN] Log levels other than TRACE are currently unreliable, and are supported only for backward compatibility.
  Use TF_LOG=TRACE to see Terraform's internal logs.
  ----
2021/06/14 15:39:18 [DEBUG] New state was assigned lineage "4fd0de70-b2be-560d-baae-e010a97ba72f"
2021/06/14 15:39:19 [DEBUG] checking for provisioner in "."
2021/06/14 15:39:19 [DEBUG] checking for provisioner in "/Users/z/.asdf/installs/terraform/0.14.7/bin"
2021/06/14 15:39:19 [INFO] Failed to read plugin lock file .terraform/plugins/darwin_amd64/lock.json: open .terraform/plugins/darwin_amd64/lock.json: no such file or directory
2021/06/14 15:39:19 [INFO] backend/local: starting Apply operation
2021-06-14T15:39:19.095-0500 [INFO]  plugin: configuring client automatic mTLS
2021-06-14T15:39:19.143-0500 [DEBUG] plugin: starting plugin: path=.terraform/providers/registry.terraform.io/cloudflare/cloudflare/2.21.0/darwin_amd64/terraform-provider-cloudflare_v2.21.0 args=[.terraform/providers/registry.terraform.io/cloudflare/cloudflare/2.21.0/darwin_amd64/terraform-provider-cloudflare_v2.21.0]
2021-06-14T15:39:19.147-0500 [DEBUG] plugin: plugin started: path=.terraform/providers/registry.terraform.io/cloudflare/cloudflare/2.21.0/darwin_amd64/terraform-provider-cloudflare_v2.21.0 pid=29639
2021-06-14T15:39:19.147-0500 [DEBUG] plugin: waiting for RPC address: path=.terraform/providers/registry.terraform.io/cloudflare/cloudflare/2.21.0/darwin_amd64/terraform-provider-cloudflare_v2.21.0
2021-06-14T15:39:19.164-0500 [INFO]  plugin.terraform-provider-cloudflare_v2.21.0: configuring server automatic mTLS: timestamp=2021-06-14T15:39:19.163-0500
2021-06-14T15:39:19.200-0500 [DEBUG] plugin: using plugin: version=5
2021-06-14T15:39:19.200-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: plugin address: address=/var/folders/nv/nhv2xjcd36dg73brpz0mg7qw0000gn/T/plugin163759506 network=unix timestamp=2021-06-14T15:39:19.200-0500
2021-06-14T15:39:19.267-0500 [WARN]  plugin.stdio: received EOF, stopping recv loop: err="rpc error: code = Unavailable desc = transport is closing"
2021-06-14T15:39:19.268-0500 [DEBUG] plugin: plugin process exited: path=.terraform/providers/registry.terraform.io/cloudflare/cloudflare/2.21.0/darwin_amd64/terraform-provider-cloudflare_v2.21.0 pid=29639
2021-06-14T15:39:19.268-0500 [DEBUG] plugin: plugin exited
2021/06/14 15:39:19 [INFO] terraform: building graph: GraphTypeValidate
2021/06/14 15:39:19 [DEBUG] adding implicit provider configuration provider["registry.terraform.io/cloudflare/cloudflare"], implied first by cloudflare_zone.zoneofproof-com
2021/06/14 15:39:19 [DEBUG] ProviderTransformer: "cloudflare_zone.zoneofproof-com" (*terraform.NodeValidatableResource) needs provider["registry.terraform.io/cloudflare/cloudflare"]
2021/06/14 15:39:19 [DEBUG] ReferenceTransformer: "cloudflare_zone.zoneofproof-com" references: []
2021/06/14 15:39:19 [DEBUG] ReferenceTransformer: "provider[\"registry.terraform.io/cloudflare/cloudflare\"]" references: []
2021/06/14 15:39:19 [DEBUG] Starting graph walk: walkValidate
2021-06-14T15:39:19.273-0500 [INFO]  plugin: configuring client automatic mTLS
2021-06-14T15:39:19.299-0500 [DEBUG] plugin: starting plugin: path=.terraform/providers/registry.terraform.io/cloudflare/cloudflare/2.21.0/darwin_amd64/terraform-provider-cloudflare_v2.21.0 args=[.terraform/providers/registry.terraform.io/cloudflare/cloudflare/2.21.0/darwin_amd64/terraform-provider-cloudflare_v2.21.0]
2021-06-14T15:39:19.302-0500 [DEBUG] plugin: plugin started: path=.terraform/providers/registry.terraform.io/cloudflare/cloudflare/2.21.0/darwin_amd64/terraform-provider-cloudflare_v2.21.0 pid=29640
2021-06-14T15:39:19.302-0500 [DEBUG] plugin: waiting for RPC address: path=.terraform/providers/registry.terraform.io/cloudflare/cloudflare/2.21.0/darwin_amd64/terraform-provider-cloudflare_v2.21.0
2021-06-14T15:39:19.319-0500 [INFO]  plugin.terraform-provider-cloudflare_v2.21.0: configuring server automatic mTLS: timestamp=2021-06-14T15:39:19.319-0500
2021-06-14T15:39:19.361-0500 [DEBUG] plugin: using plugin: version=5
2021-06-14T15:39:19.361-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: plugin address: address=/var/folders/nv/nhv2xjcd36dg73brpz0mg7qw0000gn/T/plugin549550991 network=unix timestamp=2021-06-14T15:39:19.360-0500
2021-06-14T15:39:19.439-0500 [WARN]  plugin.stdio: received EOF, stopping recv loop: err="rpc error: code = Unavailable desc = transport is closing"
2021-06-14T15:39:19.440-0500 [DEBUG] plugin: plugin process exited: path=.terraform/providers/registry.terraform.io/cloudflare/cloudflare/2.21.0/darwin_amd64/terraform-provider-cloudflare_v2.21.0 pid=29640
2021-06-14T15:39:19.440-0500 [DEBUG] plugin: plugin exited
2021/06/14 15:39:19 [INFO] backend/local: apply calling Plan
2021/06/14 15:39:19 [INFO] terraform: building graph: GraphTypePlan
2021/06/14 15:39:19 [DEBUG] adding implicit provider configuration provider["registry.terraform.io/cloudflare/cloudflare"], implied first by cloudflare_zone.zoneofproof-com (expand)
2021/06/14 15:39:19 [DEBUG] ProviderTransformer: "cloudflare_zone.zoneofproof-com (expand)" (*terraform.nodeExpandPlannableResource) needs provider["registry.terraform.io/cloudflare/cloudflare"]
2021/06/14 15:39:19 [DEBUG] ReferenceTransformer: "cloudflare_zone.zoneofproof-com (expand)" references: []
2021/06/14 15:39:19 [DEBUG] ReferenceTransformer: "provider[\"registry.terraform.io/cloudflare/cloudflare\"]" references: []
2021/06/14 15:39:19 [DEBUG] Starting graph walk: walkPlan
2021-06-14T15:39:19.442-0500 [INFO]  plugin: configuring client automatic mTLS
2021-06-14T15:39:19.467-0500 [DEBUG] plugin: starting plugin: path=.terraform/providers/registry.terraform.io/cloudflare/cloudflare/2.21.0/darwin_amd64/terraform-provider-cloudflare_v2.21.0 args=[.terraform/providers/registry.terraform.io/cloudflare/cloudflare/2.21.0/darwin_amd64/terraform-provider-cloudflare_v2.21.0]
2021-06-14T15:39:19.471-0500 [DEBUG] plugin: plugin started: path=.terraform/providers/registry.terraform.io/cloudflare/cloudflare/2.21.0/darwin_amd64/terraform-provider-cloudflare_v2.21.0 pid=29641
2021-06-14T15:39:19.471-0500 [DEBUG] plugin: waiting for RPC address: path=.terraform/providers/registry.terraform.io/cloudflare/cloudflare/2.21.0/darwin_amd64/terraform-provider-cloudflare_v2.21.0
2021-06-14T15:39:19.488-0500 [INFO]  plugin.terraform-provider-cloudflare_v2.21.0: configuring server automatic mTLS: timestamp=2021-06-14T15:39:19.488-0500
2021-06-14T15:39:19.524-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: plugin address: address=/var/folders/nv/nhv2xjcd36dg73brpz0mg7qw0000gn/T/plugin224212628 network=unix timestamp=2021-06-14T15:39:19.524-0500
2021-06-14T15:39:19.525-0500 [DEBUG] plugin: using plugin: version=5
2021-06-14T15:39:19.586-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: 2021/06/14 15:39:19 [INFO] Cloudflare Client configured for user:
2021-06-14T15:39:19.586-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: 2021/06/14 15:39:19 [INFO] Using specified account id **** in Cloudflare provider
2021-06-14T15:39:19.586-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: 2021/06/14 15:39:19 [INFO] Cloudflare Client configured for user:
2021/06/14 15:39:19 [DEBUG] Resource instance state not found for node "cloudflare_zone.zoneofproof-com", instance cloudflare_zone.zoneofproof-com
2021/06/14 15:39:19 [DEBUG] ReferenceTransformer: "cloudflare_zone.zoneofproof-com" references: []
2021/06/14 15:39:19 [DEBUG] refresh: cloudflare_zone.zoneofproof-com: no state, so not refreshing
2021-06-14T15:39:19.590-0500 [WARN]  plugin.stdio: received EOF, stopping recv loop: err="rpc error: code = Unavailable desc = transport is closing"
2021-06-14T15:39:19.591-0500 [DEBUG] plugin: plugin process exited: path=.terraform/providers/registry.terraform.io/cloudflare/cloudflare/2.21.0/darwin_amd64/terraform-provider-cloudflare_v2.21.0 pid=29641
2021-06-14T15:39:19.591-0500 [DEBUG] plugin: plugin exited

An execution plan has been generated and is shown below.
Resource actions are indicated with the following symbols:
  + create

Terraform will perform the following actions:

  # cloudflare_zone.zoneofproof-com will be created
  + resource "cloudflare_zone" "zoneofproof-com" {
      + id                  = (known after apply)
2021/06/14 15:39:19 [DEBUG] command: asking for input: "Do you want to perform these actions?"
      + meta                = (known after apply)
      + name_servers        = (known after apply)
      + paused              = false
      + plan                = "free"
      + status              = (known after apply)
      + type                = "full"
      + vanity_name_servers = (known after apply)
      + verification_key    = (known after apply)
      + zone                = "zoneofproof.com"
    }

Plan: 1 to add, 0 to change, 0 to destroy.

Do you want to perform these actions?
  Terraform will perform the actions described above.
  Only 'yes' will be accepted to approve.

  Enter a value: yes

2021/06/14 15:39:24 [INFO] backend/local: apply calling Apply
2021/06/14 15:39:24 [INFO] terraform: building graph: GraphTypeApply
2021/06/14 15:39:24 [DEBUG] Resource state not found for node "cloudflare_zone.zoneofproof-com", instance cloudflare_zone.zoneofproof-com
2021/06/14 15:39:24 [DEBUG] adding implicit provider configuration provider["registry.terraform.io/cloudflare/cloudflare"], implied first by cloudflare_zone.zoneofproof-com (expand)
2021/06/14 15:39:24 [DEBUG] ProviderTransformer: "cloudflare_zone.zoneofproof-com (expand)" (*terraform.nodeExpandApplyableResource) needs provider["registry.terraform.io/cloudflare/cloudflare"]
of-com
2021/06/14 15:39:24 [DEBUG] ProviderTransformer: "cloudflare_zone.zoneofproof-com" (*terraform.NodeApplyableResourceInstance) needs provider["registry.terraform.io/cloudflare/cloudflare"]
2021/06/14 15:39:24 [DEBUG] ReferenceTransformer: "cloudflare_zone.zoneofproof-com (expand)" references: []
2021/06/14 15:39:24 [DEBUG] ReferenceTransformer: "cloudflare_zone.zoneofproof-com" references: []
2021/06/14 15:39:24 [DEBUG] ReferenceTransformer: "provider[\"registry.terraform.io/cloudflare/cloudflare\"]" references: []
2021/06/14 15:39:24 [DEBUG] Starting graph walk: walkApply
2021-06-14T15:39:24.834-0500 [INFO]  plugin: configuring client automatic mTLS
2021-06-14T15:39:24.859-0500 [DEBUG] plugin: starting plugin: path=.terraform/providers/registry.terraform.io/cloudflare/cloudflare/2.21.0/darwin_amd64/terraform-provider-cloudflare_v2.21.0 args=[.terraform/providers/registry.terraform.io/cloudflare/cloudflare/2.21.0/darwin_amd64/terraform-provider-cloudflare_v2.21.0]
2021-06-14T15:39:24.863-0500 [DEBUG] plugin: plugin started: path=.terraform/providers/registry.terraform.io/cloudflare/cloudflare/2.21.0/darwin_amd64/terraform-provider-cloudflare_v2.21.0 pid=29650
2021-06-14T15:39:24.863-0500 [DEBUG] plugin: waiting for RPC address: path=.terraform/providers/registry.terraform.io/cloudflare/cloudflare/2.21.0/darwin_amd64/terraform-provider-cloudflare_v2.21.0
2021-06-14T15:39:24.894-0500 [INFO]  plugin.terraform-provider-cloudflare_v2.21.0: configuring server automatic mTLS: timestamp=2021-06-14T15:39:24.894-0500
2021-06-14T15:39:24.931-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: plugin address: address=/var/folders/nv/nhv2xjcd36dg73brpz0mg7qw0000gn/T/plugin327174809 network=unix timestamp=2021-06-14T15:39:24.931-0500
2021-06-14T15:39:24.931-0500 [DEBUG] plugin: using plugin: version=5
2021-06-14T15:39:24.989-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: 2021/06/14 15:39:24 [INFO] Cloudflare Client configured for user:
2021-06-14T15:39:24.989-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: 2021/06/14 15:39:24 [INFO] Using specified account id **** in Cloudflare provider
2021-06-14T15:39:24.989-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: 2021/06/14 15:39:24 [INFO] Cloudflare Client configured for user:
cloudflare_zone.zoneofproof-com: Creating...
2021/06/14 15:39:24 [DEBUG] EvalApply: ProviderMeta config value set
2021/06/14 15:39:24 [DEBUG] cloudflare_zone.zoneofproof-com: applying the planned Create change
2021-06-14T15:39:24.991-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: 2021/06/14 15:39:24 [DEBUG] setting computed for "name_servers" from ComputedKeys
2021-06-14T15:39:24.991-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: 2021/06/14 15:39:24 [DEBUG] setting computed for "vanity_name_servers" from ComputedKeys
2021-06-14T15:39:24.991-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: 2021/06/14 15:39:24 [DEBUG] setting computed for "meta" from ComputedKeys
2021-06-14T15:39:24.991-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: 2021/06/14 15:39:24 [INFO] Creating Cloudflare Zone: name zoneofproof.com
2021-06-14T15:39:24.992-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: 2021/06/14 15:39:24 [DEBUG] Cloudflare API Request Details:
2021-06-14T15:39:24.992-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: ---[ REQUEST ]---------------------------------------
2021-06-14T15:39:24.992-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: POST /client/v4/zones HTTP/1.1
2021-06-14T15:39:24.992-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Host: api.cloudflare.com
2021-06-14T15:39:24.992-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: User-Agent: HashiCorp Terraform/0.14.7 (+https://www.terraform.io) Terraform Plugin SDK/1.17.2 terraform-provider-cloudflare/2.21.0
2021-06-14T15:39:24.992-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Content-Length: 116
2021-06-14T15:39:24.992-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Authorization: Bearer ****
2021-06-14T15:39:24.992-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Content-Type: application/json
2021-06-14T15:39:24.992-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Accept-Encoding: gzip
2021-06-14T15:39:24.992-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:
2021-06-14T15:39:24.992-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: {
2021-06-14T15:39:24.992-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:  "name": "zoneofproof.com",
2021-06-14T15:39:24.992-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:  "jump_start": false,
2021-06-14T15:39:24.992-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:  "type": "full",
2021-06-14T15:39:24.992-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:  "organization": {
2021-06-14T15:39:24.992-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   "id": "****"
2021-06-14T15:39:24.992-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:  }
2021-06-14T15:39:24.992-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: }
2021-06-14T15:39:24.992-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: -----------------------------------------------------
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: 2021/06/14 15:39:26 [DEBUG] Cloudflare API Response Details:
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: ---[ RESPONSE ]--------------------------------------
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: HTTP/2.0 200 OK
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Cf-Cache-Status: DYNAMIC
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Cf-Ray: 65f65e2ecb75521d-MEX
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Cf-Request-Id: 0aadd931410000521d7399c000000001
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Content-Type: application/json
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Date: Mon, 14 Jun 2021 20:39:26 GMT
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Expect-Ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Expires: Sun, 25 Jan 1981 05:00:00 GMT
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Pragma: no-cache
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Server: cloudflare
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Set-Cookie: __cflb=0H28vgHxwvgAQtjUGU4vq74ZFe3sNVUZRAPbNtZdVCR; SameSite=Lax; path=/; expires=Mon, 14-Jun-21 23:09:27 GMT; HttpOnly
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Set-Cookie: __cfruid=b226096a01fc25729c06effd80d6770177a3fa99-1623703166; path=/; domain=.api.cloudflare.com; HttpOnly; Secure; SameSite=None
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Strict-Transport-Security: max-age=31536000
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Vary: Accept-Encoding
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: X-Content-Type-Options: nosniff
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: X-Frame-Options: SAMEORIGIN
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: {
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:  "result": {
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   "id": "8b4c5dcc9a4bba197bcde43dbe26e70f",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   "name": "zoneofproof.com",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   "status": "pending",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   "paused": false,
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   "type": "full",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   "development_mode": 0,
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   "name_servers": [
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "drake.ns.cloudflare.com",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "kristina.ns.cloudflare.com"
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   ],
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   "original_name_servers": [
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "ns75.domaincontrol.com",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "ns76.domaincontrol.com"
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   ],
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   "original_registrar": "godaddy.com, llc (id: 146)",
plugin.terraform-provider-cloudflare_v2.21.0:   "original_dnshost": null,
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   "modified_on": "2021-06-14T20:39:25.880510Z",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   "created_on": "2021-06-14T20:39:25.880510Z",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   "activated_on": null,
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   "meta": {
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "step": 4,
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "wildcard_proxiable": false,
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "custom_certificate_quota": 0,
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "page_rule_quota": 3,
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "phishing_detected": false,
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "multiple_railguns_allowed": false
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   },
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   "owner": {
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "id": "122e7dd9c8d6b55d8051286868a5c6b3",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "type": "user",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "email": "[email protected]"
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   },
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   "account": {
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "id": "****",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "name": "[email protected]"
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   },
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   "permissions": [
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#access:edit",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#access:read",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#analytics:read",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#app:edit",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#auditlogs:read",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#billing:edit",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#billing:read",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#cache_purge:edit",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#dns_records:edit",
lugin.terraform-provider-cloudflare_v2.21.0:    "#dns_records:read",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#lb:edit",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#lb:read",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#legal:edit",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#legal:read",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#logs:edit",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#logs:read",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#member:edit",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#member:read",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#organization:edit",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#organization:read",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#ssl:edit",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#ssl:read",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#stream:edit",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#stream:read",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#subscription:edit",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#subscription:read",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#teams:edit",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#teams:pii",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#teams:read",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#teams:report",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#waf:edit",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#waf:read",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#webhooks:edit",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#webhooks:read",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#worker:edit",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#worker:read",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#zone:edit",

2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#zone_settings:edit",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "#zone_settings:read"
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   ],
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   "plan": {
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "id": "0feeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "name": "Free Website",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "price": 0,
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "currency": "USD",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "frequency": "",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "is_subscribed": false,
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "can_subscribe": false,
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "legacy_id": "free",
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "legacy_discount": false,
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "externally_managed": false
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   }
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:  },
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:  "success": true,
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:  "errors": [],
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:  "messages": []
1.0: }
2021-06-14T15:39:26.049-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: -----------------------------------------------------
2021-06-14T15:39:26.050-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: 2021/06/14 15:39:26 [DEBUG] Cloudflare API Request Details:
2021-06-14T15:39:26.050-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: ---[ REQUEST ]---------------------------------------
2021-06-14T15:39:26.050-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: POST /client/v4/zones/8b4c5dcc9a4bba197bcde43dbe26e70f/subscription HTTP/1.1
2021-06-14T15:39:26.050-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Host: api.cloudflare.com
2021-06-14T15:39:26.050-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: User-Agent: HashiCorp Terraform/0.14.7 (+https://www.terraform.io) Terraform Plugin SDK/1.17.2 terraform-provider-cloudflare/2.21.0
2021-06-14T15:39:26.050-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Content-Length: 30
2021-06-14T15:39:26.050-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Authorization: Bearer ****
2021-06-14T15:39:26.050-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Content-Type: application/json
2021-06-14T15:39:26.050-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Accept-Encoding: gzip
2021-06-14T15:39:26.050-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:
2021-06-14T15:39:26.050-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: {
2021-06-14T15:39:26.050-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:  "rate_plan": {
2021-06-14T15:39:26.050-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   "id": "CF_FREE"
2021-06-14T15:39:26.050-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:  }
2021-06-14T15:39:26.050-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: }
--
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: 2021/06/14 15:39:26 [DEBUG] Cloudflare API Response Details:
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: ---[ RESPONSE ]--------------------------------------
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: HTTP/2.0 403 Forbidden
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Cf-Cache-Status: DYNAMIC
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Cf-Ray: 65f65e348998521c-MEX
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Cf-Request-Id: 0aadd934d90000521cec072000000001
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Content-Type: application/json
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Date: Mon, 14 Jun 2021 20:39:26 GMT
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Expect-Ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Server: cloudflare
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Set-Cookie: __cflb=0H28vgHxwvgAQtjUGU4vq74ZFe3sNVUZRL6GPhP86Tw; SameSite=Lax; path=/; expires=Mon, 14-Jun-21 23:09:27 GMT; HttpOnly
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Set-Cookie: __cfruid=b226096a01fc25729c06effd80d6770177a3fa99-1623703166; path=/; domain=.api.cloudflare.com; HttpOnly; Secure; SameSite=None
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: Vary: Accept-Encoding
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: {
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:  "success": false,
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:  "errors": [
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   {
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "code": 10000,
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:    "message": "Authentication error"
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:   }
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:  ]
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: }
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0:
2021-06-14T15:39:26.318-0500 [DEBUG] plugin.terraform-provider-cloudflare_v2.21.0: -----------------------------------------------------
2021/06/14 15:39:26 [DEBUG] cloudflare_zone.zoneofproof-com: apply errored, but we're indicating that via the Error pointer rather than returning it: Error setting plan free for zone "8b4c5dcc9a4bba197bcde43dbe26e70f": HTTP status 403: Authentication error (10000)

Error: Error setting plan free for zone "8b4c5dcc9a4bba197bcde43dbe26e70f": HTTP status 403: Authentication error (10000)

  on zones.tf line 1, in resource "cloudflare_zone" "zoneofproof-com":
   1: resource "cloudflare_zone" "zoneofproof-com" {


2021-06-14T15:39:26.324-0500 [WARN]  plugin.stdio: received EOF, stopping recv loop: err="rpc error: code = Unavailable desc = transport is closing"
2021-06-14T15:39:26.326-0500 [DEBUG] plugin: plugin process exited: path=.terraform/providers/registry.terraform.io/cloudflare/cloudflare/2.21.0/darwin_amd64/terraform-provider-cloudflare_v2.21.0 pid=29650
2021-06-14T15:39:26.327-0500 [DEBUG] plugin: plugin exited

zahidferz on 14 Jun 2021

Thanks. It looks like it's failing to set the subscription which from memory requires an API key (no token support) but I'll confirm later this morning.

jacobbednarz on 14 Jun 2021

So its not planned to be part of the scope of he cloudflare-provider (the creation of zones with API Tokens)?

zahidferz on 14 Jun 2021

If a zone is being created, 'free' is the default, so it is redundant to call subscriptions to create a free sub.

In either case, calling subscriptions requires billing permissions on the account, so I think that is the error you are getting. A workaround in the meantime would be adding that permission to the token.

Jacob, we should consider not calling subscriptions on zone creation if the zone plan is set to 'free'.

garrettgalow on 14 Jun 2021

👍1

We do have a separate path for new vs updated rate plans so this should be 👌.

jacobbednarz on 15 Jun 2021

I just give it the account > billing > edit permission to the token and the zone creation works smoothy with terraform and the API Token

Screen Shot 2021-06-14 at 17 10 04

Thanks a lot guys , you're doing an amazing work over here . Really appreciate it

zahidferz on 15 Jun 2021

🎉1

Awesome, that also saves me digging into whether the endpoint supported it 😆

jacobbednarz on 15 Jun 2021

😄1

Cool glad that works in the meantime, but its pretty silly to require billing access to your whole account to create only free zones, so good that we can make this better.

garrettgalow on 15 Jun 2021

Was this page helpful?

0 / 5 - 0 ratings