Skip to content

terraform

Resolving Cloudflare "Partial Zone Sign-Up Not Allowed (1104)" in Terraform

Cloudflare Terraform

When provisioning a Cloudflare Partial (CNAME) setup using Terraform, you may encounter the following error:

Error: error creating zone "vettom.online": Partial zone signup not allowed (1104)

Root Cause

Partial zone setups (where you keep your authoritative nameservers with AWS Route53 or another provider and point specific CNAME records to Cloudflare) are an Enterprise-only feature.

Additionally, programmatic creation of partial zones via the API/Terraform must be explicitly enabled on your Cloudflare enterprise account.

Resolution

  1. Verify that your Cloudflare account is subscribed to an Enterprise plan.
  2. Open a support ticket with Cloudflare Support requesting activation of "Partial Zone Setup via API/Terraform" for your Account ID.
  3. Authenticate Terraform using an API Token with Zone.Zone:Edit permissions or a Global API Key.
resource "cloudflare_zone" "zone" {
  account_id = var.cloudflare_account_id
  zone       = "vettom.online"
  type       = "partial"
  plan       = "enterprise"
}

Complete Amazon EKS Cluster Build with Terraform & ALB

EKS Architecture

Creating a functional Amazon EKS cluster from scratch requires configuring VPC subnet discovery tags, managed node groups, VPC CNI prefix delegation, and the AWS Load Balancer Controller.

📁 Source Code: aws-eks-terraform / EKS-Cluster-ALB

📺 Video Walkthrough

What's Included

  • VPC: 2 private subnets for worker nodes and 2 public subnets with ELB discovery tags.
  • EKS Cluster: Kubernetes 1.31+ with API-only access authentication (EKS Access Entries).
  • Managed Node Group: Single Spot instance running optimized Bottlerocket OS.
  • VPC-CNI Add-on: Enabled with prefix delegation for high pod density.
  • AWS Load Balancer Controller: Deployed via Helm to provision ALBs in ip target mode.