Skip to content

fix(deploy): accept CLOUDFLARE as the token secret name - #198

Merged
nish3451 merged 1 commit into
mainfrom
fix/accept-cloudflare-secret-name
Aug 20, 2026
Merged

fix(deploy): accept CLOUDFLARE as the token secret name#198
nish3451 merged 1 commit into
mainfrom
fix/accept-cloudflare-secret-name

Conversation

@nish3451

@nish3451 nish3451 commented Aug 20, 2026

Copy link
Copy Markdown
Collaborator

Owner provisioned the Pages token under secret name CLOUDFLARE instead of CLOUDFLARE_API_TOKEN. The lane now accepts either (documented name wins when both exist); fail-loud message updated.

Summary by CodeRabbit

  • Bug Fixes
    • Improved public site deployments by supporting both accepted Cloudflare authentication secrets.
    • Deployments now prioritize the documented authentication token when multiple credentials are available.
    • Updated error messages to clearly identify the supported secret names.

@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

@greptile-apps greptile-apps Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Your trial has ended. Reactivate Greptile to resume code reviews.

@coderabbitai

coderabbitai Bot commented Aug 20, 2026

Copy link
Copy Markdown

Review Change Stack

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Free

Run ID: fd7bf398-1cf7-476b-b30a-f0ed33e019c7

📥 Commits

Reviewing files that changed from the base of the PR and between c28e3e5 and aaeab8b.

📒 Files selected for processing (1)
  • .github/workflows/deploy-public-site.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.


📝 Walkthrough

Walkthrough

The public-site deployment workflow now supports CLOUDFLARE_API_TOKEN and CLOUDFLARE. It prefers CLOUDFLARE_API_TOKEN and reports both names when neither secret is available.

Changes

Cloudflare secret handling

Layer / File(s) Summary
Token resolution and validation
.github/workflows/deploy-public-site.yml
The workflow selects the first non-empty value from CLOUDFLARE_API_TOKEN and CLOUDFLARE. The provisioning error identifies both accepted secret names.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Merge Risk: ⚪ Minimal · up to aaeab

This localized workflow change accepts the provisioned CLOUDFLARE secret name while retaining the documented name as preferred; no actionable merge-blocking risk remains beyond normal checks and review.


Note

🎁 Summarized by CodeRabbit Free

Your organization is on the Free plan. CodeRabbit will generate a high-level summary and a walkthrough for each pull request. For a comprehensive line-by-line review, please upgrade your subscription to CodeRabbit Pro by visiting https://app.coderabbit.ai/login.

Comment @coderabbitai help to get the list of available commands.

@nish3451
nish3451 merged commit f9dc449 into main Aug 20, 2026
4 checks passed
nish3451 added a commit that referenced this pull request Aug 22, 2026
…-08-20) (#210)

The soft-404 defect (unknown URL returns HTTP 200 with the homepage body)
is now fixed on https://tinystudio.in: a random nonce URL returns HTTP 404
with the real 'Page not found' page (title 'Page not found • Tiny Studio',
H1 'This page could not be found.', noindex meta, shared header/footer
chrome, no canonical to '/'). The dedicated live soft-404 checker passes
18/18 and the static unit test passes 21/21.

Previous 2026-08-17 reverify (PR #189) concluded the soft-404 was real and
live, blocked on the missing CLOUDFLARE_API_TOKEN. The deploy lane has
since been repaired end-to-end:
- PR #198: workflow reads secrets.CLOUDFLARE_API_TOKEN || secrets.CLOUDFLARE
- PR #199: PAGES_PROJECT = 'tiny-studio' (was the broken 'tiny-studio-3f5'
  subdomain), wrangler --project-name fixed
- PR #208: CF_API_BASE /api/v4 -> /client/v4 (captureProductionIdentity
  was 403'ing on every call since the lane was created)

With the lane able to capture a real canonical_deployment, the daily
schedule + the next main push published the filtered public/ bundle, and
the live 404 page now appears. Live evidence (curl, live checker, deploy
acceptance section C, deploy-bundle gate) all agree; item is closed on
the live proof, not a code task.

Report only; no source file changed. Files:
  + .lane/reports/docs-lane1-soft-404-reverify-20260820.md

Co-authored-by: minimax-vps <minimax-vps@MiniMax.local>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant