pangea-cloudflare 0.1.0

data/lib/pangea/resources/cloudflare_zero_trust_network_hostname_route/resource.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_zero_trust_network_hostname_route/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareZeroTrustNetworkHostnameRoute
+    def cloudflare_zero_trust_network_hostname_route(name, attributes = {})
+      attrs = Cloudflare::Types::ZeroTrustNetworkHostnameRouteAttributes.new(attributes)
+      resource(:cloudflare_zero_trust_network_hostname_route, name) do
+        account_id attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_zero_trust_network_hostname_route',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_zero_trust_network_hostname_route.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareZeroTrustNetworkHostnameRoute
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_zero_trust_network_hostname_route/types.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class ZeroTrustNetworkHostnameRouteAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId
+  end
+end

data/lib/pangea/resources/cloudflare_zero_trust_organization/resource.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_zero_trust_organization/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareZeroTrustOrganization
+    def cloudflare_zero_trust_organization(name, attributes = {})
+      attrs = Cloudflare::Types::ZeroTrustOrganizationAttributes.new(attributes)
+      resource(:cloudflare_zero_trust_organization, name) do
+        account_id attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_zero_trust_organization',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_zero_trust_organization.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareZeroTrustOrganization
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_zero_trust_organization/types.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class ZeroTrustOrganizationAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId
+  end
+end

data/lib/pangea/resources/cloudflare_zero_trust_risk_behavior/resource.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_zero_trust_risk_behavior/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareZeroTrustRiskBehavior
+    def cloudflare_zero_trust_risk_behavior(name, attributes = {})
+      attrs = Cloudflare::Types::ZeroTrustRiskBehaviorAttributes.new(attributes)
+      resource(:cloudflare_zero_trust_risk_behavior, name) do
+        account_id attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_zero_trust_risk_behavior',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_zero_trust_risk_behavior.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareZeroTrustRiskBehavior
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_zero_trust_risk_behavior/types.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class ZeroTrustRiskBehaviorAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId
+  end
+end

data/lib/pangea/resources/cloudflare_zero_trust_risk_scoring_integration/resource.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_zero_trust_risk_scoring_integration/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareZeroTrustRiskScoringIntegration
+    def cloudflare_zero_trust_risk_scoring_integration(name, attributes = {})
+      attrs = Cloudflare::Types::ZeroTrustRiskScoringIntegrationAttributes.new(attributes)
+      resource(:cloudflare_zero_trust_risk_scoring_integration, name) do
+        account_id attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_zero_trust_risk_scoring_integration',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_zero_trust_risk_scoring_integration.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareZeroTrustRiskScoringIntegration
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_zero_trust_risk_scoring_integration/types.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class ZeroTrustRiskScoringIntegrationAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId
+  end
+end

data/lib/pangea/resources/cloudflare_zero_trust_tunnel_cloudflared/resource.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_zero_trust_tunnel_cloudflared/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareZeroTrustTunnelCloudflared
+    def cloudflare_zero_trust_tunnel_cloudflared(name, attributes = {})
+      attrs = Cloudflare::Types::ZeroTrustTunnelCloudflaredAttributes.new(attributes)
+      resource(:cloudflare_zero_trust_tunnel_cloudflared, name) do
+        account_id attrs.account_id
+        name attrs.name
+        secret attrs.secret
+        config_src attrs.config_src if attrs.config_src
+      end
+      ResourceReference.new(
+        type: 'cloudflare_zero_trust_tunnel_cloudflared',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: {
+          id: "${cloudflare_zero_trust_tunnel_cloudflared.#{name}.id}",
+          cname: "${cloudflare_zero_trust_tunnel_cloudflared.#{name}.cname}",
+          tunnel_token: "${cloudflare_zero_trust_tunnel_cloudflared.#{name}.tunnel_token}"
+        }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareZeroTrustTunnelCloudflared
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_zero_trust_tunnel_cloudflared/types.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class ZeroTrustTunnelCloudflaredAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId
+    attribute :name, Dry::Types['strict.string']
+    attribute :secret, Dry::Types['strict.string']
+    attribute :config_src, Dry::Types['strict.string'].enum('local', 'cloudflare').optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_zero_trust_tunnel_cloudflared_config/resource.rb

@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_zero_trust_tunnel_cloudflared_config/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareZeroTrustTunnelCloudflaredConfig
+    def cloudflare_zero_trust_tunnel_cloudflared_config(name, attributes = {})
+      attrs = Cloudflare::Types::ZeroTrustTunnelCloudflaredConfigAttributes.new(attributes)
+      resource(:cloudflare_zero_trust_tunnel_cloudflared_config, name) do
+        account_id attrs.account_id
+        tunnel_id attrs.tunnel_id
+        config attrs.config
+      end
+      ResourceReference.new(
+        type: 'cloudflare_zero_trust_tunnel_cloudflared_config',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_zero_trust_tunnel_cloudflared_config.#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareZeroTrustTunnelCloudflaredConfig
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_zero_trust_tunnel_cloudflared_config/types.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class ZeroTrustTunnelCloudflaredConfigAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId
+    attribute :tunnel_id, Dry::Types['strict.string']
+    attribute :config, Dry::Types['strict.hash']
+  end
+end

data/lib/pangea/resources/cloudflare_zero_trust_tunnel_cloudflared_route/resource.rb

@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_zero_trust_tunnel_cloudflared_route/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareZeroTrustTunnelCloudflaredRoute
+    def cloudflare_zero_trust_tunnel_cloudflared_route(name, attributes = {})
+      attrs = Cloudflare::Types::ZeroTrustTunnelCloudflaredRouteAttributes.new(attributes)
+      resource(:cloudflare_zero_trust_tunnel_cloudflared_route, name) do
+        account_id attrs.account_id
+        tunnel_id attrs.tunnel_id
+        network attrs.network
+        comment attrs.comment if attrs.comment
+        virtual_network_id attrs.virtual_network_id if attrs.virtual_network_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_zero_trust_tunnel_cloudflared_route',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_zero_trust_tunnel_cloudflared_route.#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareZeroTrustTunnelCloudflaredRoute
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_zero_trust_tunnel_cloudflared_route/types.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class ZeroTrustTunnelCloudflaredRouteAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId
+    attribute :tunnel_id, Dry::Types['strict.string']
+    attribute :network, Dry::Types['strict.string']
+    attribute :comment, Dry::Types['strict.string'].optional.default(nil)
+    attribute :virtual_network_id, Dry::Types['strict.string'].optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_zero_trust_tunnel_cloudflared_virtual_network/resource.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_zero_trust_tunnel_cloudflared_virtual_network/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareZeroTrustTunnelCloudflaredVirtualNetwork
+    def cloudflare_zero_trust_tunnel_cloudflared_virtual_network(name, attributes = {})
+      attrs = Cloudflare::Types::ZeroTrustTunnelCloudflaredVirtualNetworkAttributes.new(attributes)
+      resource(:cloudflare_zero_trust_tunnel_cloudflared_virtual_network, name) do
+        account_id attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_zero_trust_tunnel_cloudflared_virtual_network',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_zero_trust_tunnel_cloudflared_virtual_network.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareZeroTrustTunnelCloudflaredVirtualNetwork
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_zero_trust_tunnel_cloudflared_virtual_network/types.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class ZeroTrustTunnelCloudflaredVirtualNetworkAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId
+  end
+end

data/lib/pangea/resources/cloudflare_zero_trust_tunnel_warp_connector/resource.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_zero_trust_tunnel_warp_connector/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareZeroTrustTunnelWarpConnector
+    def cloudflare_zero_trust_tunnel_warp_connector(name, attributes = {})
+      attrs = Cloudflare::Types::ZeroTrustTunnelWarpConnectorAttributes.new(attributes)
+      resource(:cloudflare_zero_trust_tunnel_warp_connector, name) do
+        account_id attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_zero_trust_tunnel_warp_connector',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_zero_trust_tunnel_warp_connector.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareZeroTrustTunnelWarpConnector
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_zero_trust_tunnel_warp_connector/types.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class ZeroTrustTunnelWarpConnectorAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId
+  end
+end

data/lib/pangea/resources/cloudflare_zone/resource.rb

@@ -0,0 +1,71 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_zone/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    # Cloudflare Zone resource module that self-registers
+    module CloudflareZone
+      # Create a Cloudflare Zone with type-safe attributes
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] Zone attributes
+      # @return [ResourceReference] Reference object with outputs and computed properties
+      def cloudflare_zone(name, attributes = {})
+        # Validate attributes using dry-struct
+        zone_attrs = Cloudflare::Types::ZoneAttributes.new(attributes)
+
+        # Generate terraform resource block via terraform-synthesizer
+        resource(:cloudflare_zone, name) do
+          zone zone_attrs.zone
+          account_id zone_attrs.account_id if zone_attrs.account_id
+          jump_start zone_attrs.jump_start
+          paused zone_attrs.paused
+          plan zone_attrs.plan
+          type zone_attrs.type
+        end
+
+        # Return resource reference with available outputs
+        ResourceReference.new(
+          type: 'cloudflare_zone',
+          name: name,
+          resource_attributes: zone_attrs.to_h,
+          outputs: {
+            id: "${cloudflare_zone.#{name}.id}",
+            zone_id: "${cloudflare_zone.#{name}.id}",
+            status: "${cloudflare_zone.#{name}.status}",
+            name_servers: "${cloudflare_zone.#{name}.name_servers}",
+            vanity_name_servers: "${cloudflare_zone.#{name}.vanity_name_servers}",
+            verification_key: "${cloudflare_zone.#{name}.verification_key}",
+            meta: "${cloudflare_zone.#{name}.meta}"
+          }
+        )
+      end
+    end
+
+    # Maintain backward compatibility by extending Cloudflare module
+    module Cloudflare
+      include CloudflareZone
+    end
+  end
+end
+
+# Auto-register this module when it's loaded
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_zone/types.rb

@@ -0,0 +1,62 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea
+  module Resources
+    module Cloudflare
+      module Types
+        # Cloudflare Zone resource attributes with validation
+        class ZoneAttributes < Dry::Struct
+          transform_keys(&:to_sym)
+
+          attribute :zone, ::Pangea::Resources::Types::DomainName
+          attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+          attribute :jump_start, ::Pangea::Resources::Types::Bool.default(false)
+          attribute :paused, ::Pangea::Resources::Types::Bool.default(false)
+          attribute :plan, ::Pangea::Resources::Types::CloudflareZonePlan
+          attribute :type, ::Pangea::Resources::Types::CloudflareZoneType
+
+          # Computed properties
+          def is_active?
+            !paused
+          end
+
+          def is_enterprise?
+            plan == 'enterprise'
+          end
+
+          def is_free?
+            plan == 'free'
+          end
+
+          def zone_root_domain
+            # Extract root domain from zone
+            parts = zone.split('.')
+            return zone if parts.length <= 2
+            parts[-2..-1].join('.')
+          end
+
+          def is_subdomain?
+            zone.split('.').length > 2
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/cloudflare_zone_cache_reserve/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_zone_cache_reserve/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareZoneCacheReserve
+    def cloudflare_zone_cache_reserve(name, attributes = {})
+      attrs = Cloudflare::Types::ZoneCacheReserveAttributes.new(attributes)
+      resource(:cloudflare_zone_cache_reserve, name) do
+        zone_id attrs.zone_id if attrs.zone_id
+        account_id attrs.account_id if attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_zone_cache_reserve',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_zone_cache_reserve.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareZoneCacheReserve
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_zone_cache_reserve/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class ZoneCacheReserveAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_zone_cache_variants/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_zone_cache_variants/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareZoneCacheVariants
+    def cloudflare_zone_cache_variants(name, attributes = {})
+      attrs = Cloudflare::Types::ZoneCacheVariantsAttributes.new(attributes)
+      resource(:cloudflare_zone_cache_variants, name) do
+        zone_id attrs.zone_id if attrs.zone_id
+        account_id attrs.account_id if attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_zone_cache_variants',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_zone_cache_variants.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareZoneCacheVariants
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_zone_cache_variants/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class ZoneCacheVariantsAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_zone_dns_settings/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_zone_dns_settings/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareZoneDnsSettings
+    def cloudflare_zone_dns_settings(name, attributes = {})
+      attrs = Cloudflare::Types::ZoneDnsSettingsAttributes.new(attributes)
+      resource(:cloudflare_zone_dns_settings, name) do
+        zone_id attrs.zone_id if attrs.zone_id
+        account_id attrs.account_id if attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_zone_dns_settings',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_zone_dns_settings.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareZoneDnsSettings
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_zone_dns_settings/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class ZoneDnsSettingsAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+  end
+end