Set status attribute of token

.github/workflows/terraform.yml

@@ -9,17 +9,17 @@ jobs:
   Linting:
     runs-on: ubuntu-latest
     steps:
-        - uses: actions/checkout@v4
+      - uses: actions/checkout@v4
 
-        - uses: hashicorp/setup-terraform@v3
+      - uses: hashicorp/setup-terraform@v3
 
-        - name: Terraform Docs
-          run: |
-              docker run --rm --volume "$(pwd):/terraform-docs" -u $(id -u) quay.io/terraform-docs/terraform-docs:0.19.0 --output-check /terraform-docs
-        
-        - name: Terraform Format Check
-          run: |
-              terraform fmt -check -recursive
+      - name: Terraform Docs
+        run: |
+            docker run --rm --volume "$(pwd):/terraform-docs" -u $(id -u) quay.io/terraform-docs/terraform-docs:0.20.0 --output-check /terraform-docs
+
+      - name: Terraform Format Check
+        run: |
+            terraform fmt -check -recursive
 
   Terraform:
     runs-on: ubuntu-latest

README.md

@@ -57,6 +57,7 @@ No modules.
 | <a name="input_expires_on"></a> [expires\_on](#input\_expires\_on) | The expiration time on or after which the token MUST NOT be accepted for processing. If not specified, the token will not expire. | `string` | `""` | no |
 | <a name="input_jurisdiction"></a> [jurisdiction](#input\_jurisdiction) | Jurisdiction of R2 buckets | `string` | `"default"` | no |
 | <a name="input_not_before"></a> [not\_before](#input\_not\_before) | The time before which the token MUST NOT be accepted for processing. If not specified, the token will be valid immediately. | `string` | `""` | no |
+| <a name="input_status"></a> [status](#input\_status) | Status of the API token. Can be 'active' or 'disabled'. Defaults to 'active'. | `string` | `"active"` | no |
 | <a name="input_token_name"></a> [token\_name](#input\_token\_name) | Name of the API token.<br/>If none given then the fomart is: `R2-<comma separated names>-<Read if 'bucket-read'>-<Write if 'bucket-write'>` | `string` | `""` | no |
 
 ## Outputs

main.tf

@@ -36,4 +36,5 @@ resource "cloudflare_api_token" "token" {
       not_in = var.condition_ip_not_in
     }
   }
+  status = var.status
 }

variables.tf

@@ -55,4 +55,14 @@ variable "condition_ip_not_in" {
   description = "List of IP addresses or CIDR notation where the token should not be used from."
   type        = list(string)
   default     = []
+}
+
+variable "status" {
+  description = "Status of the API token. Can be 'active' or 'disabled'. Defaults to 'active'."
+  type        = string
+  default     = "active"
+  validation {
+    condition     = contains(["active", "disabled"], var.status)
+    error_message = "Status must be either 'active' or 'disabled'."
+  }
 }