Skip to content

Commit 9a3fafd

Browse files
committed
docs: public beta, all plans, remove internal references
1 parent 83f2f93 commit 9a3fafd

5 files changed

Lines changed: 22 additions & 56 deletions

File tree

src/content/changelog/resource-tagging/2026-01-28-resource-tagging-private-beta.mdx

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
11
---
2-
title: Resource Tagging enters private beta
3-
description: Enterprise customers can now attach key-value metadata to Cloudflare resources via API.
2+
title: Resource Tagging enters public beta
3+
description: Cloudflare customers can now attach key-value metadata to resources via API.
44
date: 2026-01-28
55
---
66

7-
Resource Tagging is now available in private beta for Enterprise customers. The feature enables attaching custom key-value metadata to Cloudflare resources for organization, access control, and billing attribution.
7+
Resource Tagging is now available in public beta. The feature enables attaching custom key-value metadata to Cloudflare resources for organization, access control, and billing attribution.
88

99
### What's included
1010

src/content/changelog/resource-tagging/2026-03-25-expanded-roles-and-aot-updates.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,8 +14,8 @@ Tag management is no longer limited to Super Administrators. The following roles
1414

1515
### AOT provisioning change
1616

17-
Account Owned Tokens for tagging are now **created on behalf of customers** by the GRM team. Customers can view their tokens but cannot modify them directly. This simplifies onboarding and ensures tokens have the correct permissions from the start.
17+
Account Owned Tokens for tagging are now **provisioned on behalf of customers**. Customers can view their tokens but cannot modify them directly. This simplifies onboarding and ensures tokens have the correct permissions from the start.
1818

1919
### Dashboard UI in development
2020

21-
The Stratus-based Dashboard UI for resource tagging is in active development. A staging preview is available behind the `resource-tagging-ui-experiments` gate. The Dashboard experience will complement (not replace) the existing API.
21+
The Dashboard UI for resource tagging is in active development. The Dashboard experience will complement (not replace) the existing API.

src/content/docs/resource-tagging/get-started.mdx

Lines changed: 12 additions & 33 deletions
Original file line numberDiff line numberDiff line change
@@ -3,37 +3,20 @@ title: Get started
33
pcx_content_type: get-started
44
sidebar:
55
order: 2
6-
description: Enable Resource Tagging for a customer account and make your first API calls.
6+
description: Set up authentication for Resource Tagging and make your first API calls.
77
---
88

9-
This guide walks you through enabling tagging for an Enterprise account and verifying it works.
9+
This guide walks you through verifying that tagging works on your account and making your first API calls.
1010

1111
## Prerequisites
1212

13-
Before enabling Resource Tagging, ensure the account meets these requirements:
14-
15-
- **Enterprise plan** -- Resource Tagging is only available to Enterprise customers.
1613
- **Super Admin access** -- At least one user with the Super Administrator, Workers Admin, or Tag Admin role. These roles can create, update, and delete tags.
17-
- **API familiarity** -- The feature is API-only during the private beta. Customers must be comfortable making authenticated HTTP requests.
18-
19-
## 1. Request enablement
20-
21-
Contact PM Wesley Evans to request tagging enablement for a customer account:
22-
23-
- **G-Chat**: Join the "Tags for Cloudflare" space for real-time support
24-
- **Email**: wesley.evans@cloudflare.com
14+
- **API familiarity** -- The feature is API-only during the beta. You should be comfortable making authenticated HTTP requests.
15+
- **API token** -- An API token with the required [permissions](/resource-tagging/reference/api/#required-permissions). [Account Owned Tokens (AOTs)](/fundamentals/api/get-started/account-owned-tokens/) are recommended for automation.
2516

26-
Provide the following:
17+
## 1. Verify tagging is enabled
2718

28-
- **Account ID** -- The customer's Cloudflare account ID, found in the Dashboard URL or via `GET /accounts`.
29-
- **Use case** -- A brief description of how the customer plans to use tagging (1-2 sentences).
30-
- **Products to be tagged** -- Which resource types the customer plans to tag initially (for example, `workers_script`, `zone`, `custom_hostnames`).
31-
32-
Wesley will enable the feature via [gates.cloudflare.com](https://gates.cloudflare.com). Typical turnaround is 1-2 business days.
33-
34-
## 2. Verify tagging is enabled
35-
36-
After receiving enablement confirmation, test the API:
19+
Test the API to confirm tagging is active on your account:
3720

3821
```bash
3922
curl -X GET "https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/tags/keys" \
@@ -45,17 +28,13 @@ curl -X GET "https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/tags/keys
4528

4629
| Response | Meaning | Action |
4730
| --- | --- | --- |
48-
| **200 OK** with `{"success": true, "result": [...]}` | Tagging is enabled. An empty array is normal if no tags exist yet. | Proceed with onboarding. |
49-
| **403** mentioning "permission" or "role" | The caller lacks required permissions. This is not a gating issue. | Verify the caller has Super Admin role or the token has `#com.cloudflare.api.account.tag.list` scope. |
50-
| **403** mentioning "feature" or "gate" | Tagging is not enabled for this account. | Confirm the Account ID matches what was provided to Wesley. Contact the Tags for Cloudflare G-Chat space. |
31+
| **200 OK** with `{"success": true, "result": [...]}` | Tagging is enabled. An empty array is normal if no tags exist yet. | Proceed to the next step. |
32+
| **403** mentioning "permission" or "role" | The caller lacks required permissions. | Verify the caller has a Super Admin, Workers Admin, or Tag Admin role, or that the token has `#com.cloudflare.api.account.tag.list` scope. |
33+
| **403** mentioning "feature" or "gate" | Tagging is not enabled for this account. | Contact [Cloudflare support](/support/contacting-cloudflare-support/) for assistance. |
5134
| **401 Unauthorized** | Authentication failed. | Verify the token is valid, not expired, and formatted correctly in the `Authorization: Bearer` header. |
52-
| Any other response | Unexpected error. | Capture the full response body and escalate to the Tags for Cloudflare G-Chat space with the Account ID, request details, and timestamp. |
53-
54-
:::note
55-
Gate changes typically propagate within seconds, but may take up to 15 minutes in rare cases. If you receive a gating error immediately after enablement, wait briefly and retry.
56-
:::
35+
| Any other response | Unexpected error. | Capture the full response body and contact [Cloudflare support](/support/contacting-cloudflare-support/) with the Account ID, request details, and timestamp. |
5736

58-
## 3. Create your first tags
37+
## 2. Create your first tags
5938

6039
Set tags on a resource using `PUT`:
6140

@@ -81,7 +60,7 @@ curl -X GET "https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/tags?reso
8160
-H "Content-Type: application/json"
8261
```
8362

84-
## 4. List tagged resources
63+
## 3. List tagged resources
8564

8665
Query all tagged resources in the account, optionally filtering by tag:
8766

src/content/docs/resource-tagging/index.mdx

Lines changed: 5 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -16,22 +16,14 @@ Attach custom key-value metadata to Cloudflare resources for organization, acces
1616

1717
</Description>
1818

19-
<Plan type="enterprise" />
19+
<Plan type="all" />
2020

2121
Resource Tagging lets you attach key-value pairs to Cloudflare resources like Workers scripts, zones, custom hostnames, and Access application policies. Tags are stored separately from the resources themselves, enabling cross-resource queries and policy enforcement without modifying underlying resource configurations.
2222

23-
:::note[Private beta]
24-
Resource Tagging is currently in private beta and available exclusively to Enterprise customers. The API is stable, but behavior may change as we iterate based on feedback.
23+
:::note[Public beta]
24+
Resource Tagging is in public beta. The API is stable, but behavior may change as we iterate based on feedback.
2525
:::
2626

27-
## Key use cases
28-
29-
- **Resource grouping** -- Track and manage resources across teams, products, or projects. Tag all resources belonging to a team or product line for bulk operations and inventory management.
30-
- **Access control** -- Implement fine-grained permission policies based on tags. Restrict user access to resources tagged with specific values like `environment=production` or `team=platform-engineering`.
31-
- **Billing attribution** -- Allocate costs by business context. Tag resources with cost centers, departments, or projects for chargeback reports.
32-
- **Environment management** -- Distinguish production from non-production resources. Apply tags like `environment=staging` to enforce different policies or deployment workflows.
33-
- **Ownership tracking** -- Identify resource owners and responsible teams for incident response and maintenance scheduling.
34-
3527
## How it works
3628

3729
Tags are simple key-value string pairs stored as a JSON object:
@@ -50,11 +42,11 @@ Authentication uses [Account Owned Tokens (AOTs)](/fundamentals/api/get-started/
5042

5143
## Limitations
5244

53-
- **API-only** -- There is no Dashboard UI during the private beta. A Dashboard experience is in active development.
45+
- **API-only** -- There is no Dashboard UI during the beta. A Dashboard experience is in active development.
5446
- **PUT replaces all tags** -- There is no PATCH endpoint. The `PUT` operation replaces all tags on a resource. Use the [GET, merge, PUT workflow](/resource-tagging/how-to/manage-tags/#add-a-single-tag) to modify individual tags.
5547
- **DELETE removes all tags** -- There is no way to delete a single tag. Use `PUT` with the remaining tags instead.
5648
- **500 on untagged resources** -- Querying tags for a resource that has never been tagged returns a `500` error instead of `404`. This is a known beta limitation.
5749

5850
## Get started
5951

60-
Follow the [Get started guide](/resource-tagging/get-started/) to enable tagging for a customer account and make your first API calls.
52+
Follow the [Get started guide](/resource-tagging/get-started/) to set up authentication and make your first API calls.

src/content/docs/resource-tagging/reference/api.mdx

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -6,11 +6,6 @@ sidebar:
66
description: Tagging API endpoints, authentication, and common response patterns.
77
---
88

9-
The Tagging API is verified against OpenAPI spec v4.0.1. Full machine-readable specs are available on Backstage:
10-
11-
- [Public API spec](https://backstage.cfdata.org/catalog/default/api/resource-tagging-v4-api/definition)
12-
- [Internal admin API spec](https://backstage.cfdata.org/catalog/default/api/resource-tagging-admin-api/definition)
13-
149
## Base URL
1510

1611
```

0 commit comments

Comments
 (0)