Cloudflare Query

Cloudflare Query
Certified
Run a SQL statement against a Cloudflare D1 database

Executes a parameterized SQL statement against a D1 database. Supports four fetch modes: FETCH_ONE returns the first row as a map, FETCH returns all rows as a list of maps, STORE writes all rows to Kestra internal storage as a newline-delimited ION file, and NONE returns only the query metadata (rows written, duration).

yaml
type: io.kestra.plugin.cloudflare.d1.Query

Examples

Run a SELECT and store results in Kestra storage

yaml
id: d1_query_store
namespace: company.team

tasks:
  - id: query
    type: io.kestra.plugin.cloudflare.d1.Query
    apiToken: "{{ secret('CLOUDFLARE_API_TOKEN') }}"
    accountId: "your_account_id"
    databaseId: "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
    sql: "SELECT id, name FROM users WHERE active = ?"
    params:
      - true
    fetchType: STORE

Insert a row and capture metadata

yaml
id: d1_query_insert
namespace: company.team

tasks:
  - id: insert
    type: io.kestra.plugin.cloudflare.d1.Query
    apiToken: "{{ secret('CLOUDFLARE_API_TOKEN') }}"
    accountId: "your_account_id"
    databaseId: "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
    sql: "INSERT INTO events (name, ts) VALUES (?, ?)"
    params:
      - "deploy"
      - "2024-01-01T00:00:00Z"
    fetchType: NONE

Properties

accountId *string

Account ID

Cloudflare account identifier

apiToken *string

Cloudflare API token

Your Cloudflare API token. Create one in the Cloudflare dashboard with the permissions required by the resources you manage (e.g. DNS, Workers, D1, cache, WAF, zones).

databaseId *string

Database ID

UUID of the D1 database to query

sql *string

SQL statement

Parameterized SQL statement to execute; use ? as positional placeholders

baseUrl string

Defaulthttps://api.cloudflare.com/client/v4

Cloudflare API base URL

Base URL for Cloudflare API. Usually you don't need to change this.

fetchType string

DefaultSTORE

Possible Values

FETCH_ONEFETCHSTORENONE

Fetch type

Controls how result rows are returned: FETCH_ONE returns the first row as a map, FETCH returns all rows as a list of maps, STORE writes all rows to Kestra internal storage and returns a URI, NONE returns only query execution metadata.

options

HTTP client options

Optional advanced HTTP settings like timeouts or proxy.

Definitions

io.kestra.core.http.client.configurations.HttpConfiguration

allowFailedbooleanstring

Defaultfalse

If true, allow a failed response code (response code >= 400)

allowedResponseCodesarray

SubTypeinteger

List of response code allowed for this request

auth

The authentication to use.

io.kestra.core.http.client.configurations.BasicAuthConfiguration

type*object

passwordstring

The password for HTTP basic authentication.

usernamestring

The username for HTTP basic authentication.

io.kestra.core.http.client.configurations.BearerAuthConfiguration

type*object

tokenstring

The token for bearer token authentication.

io.kestra.core.http.client.configurations.DigestAuthConfiguration

type*object

passwordstring

The password for HTTP Digest authentication.

usernamestring

The username for HTTP Digest authentication.

basicAuthPasswordstring

The password for HTTP basic authentication. Deprecated, use auth property with a BasicAuthConfiguration instance instead.

basicAuthUserstring

The username for HTTP basic authentication. Deprecated, use auth property with a BasicAuthConfiguration instance instead.

connectTimeoutstring

Formatduration

The time allowed to establish a connection to the server before failing.

connectionPoolIdleTimeoutstring

Formatduration

The time an idle connection can remain in the client's connection pool before being closed.

defaultCharsetstring

DefaultUTF-8

The default charset for the request.

java.nio.charset.Charset

enabledTcpExtendedKeepAlivebooleanstring

Defaulttrue

Whether to enable TCP Keep-Alive extended socket options (TCP_KEEPIDLE, TCP_KEEPINTERVAL, TCP_KEEPCOUNT).

Set to false when running on Windows workers, as these extended socket options are not supported by the Windows JDK and will cause connection failures.

followRedirectsbooleanstring

Defaulttrue

Whether redirects should be followed automatically.

logLevelstring

Possible Values

ALLTRACEDEBUGINFOWARNERROROFFNOT_SPECIFIED

The log level for the HTTP client.

logsarray

SubTypestring

Possible Values

REQUEST_HEADERSREQUEST_BODYRESPONSE_HEADERSRESPONSE_BODY

The enabled log.

maxContentLengthinteger

The maximum content length of the response.

proxy

The proxy configuration.

io.kestra.core.http.client.configurations.ProxyConfiguration

addressstring

The address of the proxy server.

passwordstring

The password for proxy authentication.

portintegerstring

The port of the proxy server.

typestring

DefaultDIRECT

Possible Values

DIRECTHTTPSOCKS

The type of proxy to use.

usernamestring

The username for proxy authentication.

proxyAddressstring

The address of the proxy server.

proxyPasswordstring

The password for proxy authentication.

proxyPortinteger

The port of the proxy server.

proxyTypestring

Possible Values

DIRECTHTTPSOCKS

The type of proxy to use.

proxyUsernamestring

The username for proxy authentication.

readIdleTimeoutstring

Formatduration

The time allowed for a read connection to remain idle before closing it.

readTimeoutstring

Formatduration

The maximum time allowed for reading data from the server before failing.

ssl

The SSL request options

io.kestra.core.http.client.configurations.SslOptions

insecureTrustAllCertificatesbooleanstring

Whether to disable checking of the remote SSL certificate.

Only applies if no trust store is configured. Note: This makes the SSL connection insecure and should only be used for testing. If you are using a self-signed certificate, set up a trust store instead.

timeout

The timeout configuration.

io.kestra.core.http.client.configurations.TimeoutConfiguration

connectTimeoutstring

The time allowed to establish a connection to the server before failing.

readIdleTimeoutstring

DefaultPT5M

The time allowed for a read connection to remain idle before closing it.