Avoid slow cache restore and scope Worker preview token

This commit is contained in:
Kevin
2026-09-02 01:06:51 -04:00
parent 15f03016b5
commit 9042639dd4
3 changed files with 9 additions and 4 deletions
+5 -1
View File
@@ -10,7 +10,11 @@ separate Worker names:
`workers.dev` is the only preview destination. Neither Wrangler configuration
contains a route, custom domain, zone ID, account ID, or token. Cloudflare
credentials remain Gitea repository secrets.
credentials remain Gitea repository secrets. The preview workflow uses
`CF_WORKER_PREVIEW_TOKEN`, scoped only to the Cloudflare account hosting this
pilot. Grant it the Cloudflare **Edit Cloudflare Workers** template (including
Account Workers Scripts edit/write) and retain `CF_ACCOUNT_ID` as the account
selector. Do not grant DNS edit permissions for routine preview deployment.
The primary Worker must pass its public preview test matrix before an operator
records the exact Pages deployment/DNS state and requests production-cutover