Cloudflared extension error: "Provided Tunnel token is not valid"

[nicolas-g]

Creating this discussion here after my issue was closed.

I've been trying to configure my CloudFlareD extension but getting "Provided Tunnel token is not valid" error.
Followed the config steps from https://github.com/siderolabs/extensions/tree/main/network/cloudflared#usage.
I also realized cloudflared version that comes with Talos is 2024.12.1 which is old as the latest one available is 2025.8.0.

cloudflared-config.yaml (real token replaced)

---
apiVersion: v1alpha1
kind: ExtensionServiceConfig
name: cloudflared
environment:
  - TUNNEL_TOKEN=XYZ
  - TUNNEL_METRICS=localhost:2000
  - TUNNEL_EDGE_IP_VERSION=auto

I have confirmed the Cloudflare API token is valid:

$ curl "https://api.cloudflare.com/client/v4/user/tokens/verify" -H "Authorization: Bearer $CLOUDFLARE_API"

{"result":{"id":"496f84ceedc4942e7574f363b35a5c4f","status":"active"},"success":true,"errors":[],"messages":[{"code":10000,"message":"This API Token is valid and active","type":null}]}%

Logs

talosctl dmesg

192.168.86.20: user: warning: [2025-08-18T14:24:37.684924391Z]: [talos] service[ext-cloudflared](Running): Started task ext-cloudflared (PID 72008) for container ext-cloudflared
192.168.86.20: user: warning: [2025-08-18T14:24:38.470716391Z]: [talos] service[ext-cloudflared](Waiting): Error running Containerd(ext-cloudflared), going to restart forever: task "ext-cloudflared" failed: exit code 255
192.168.86.20: user: warning: [2025-08-18T14:24:43.727681391Z]: [talos] service[ext-cloudflared](Running): Started task ext-cloudflared (PID 72101) for container ext-cloudflared
192.168.86.20: user: warning: [2025-08-18T14:24:44.796692391Z]: [talos] service[ext-cloudflared](Waiting): Error running Containerd(ext-cloudflared), going to restart forever: task "ext-cloudflared" failed: exit code 255
192.168.86.20: user: warning: [2025-08-18T14:24:50.339935391Z]: [talos] service[ext-cloudflared](Running): Started task ext-cloudflared (PID 72199) for container ext-cloudflared
192.168.86.20: user: warning: [2025-08-18T14:24:51.830177391Z]: [talos] service[ext-cloudflared](Waiting): Error running Containerd(ext-cloudflared), going to restart forever: task "ext-cloudflared" failed: exit code 255
192.168.86.20: user: warning: [2025-08-18T14:24:57.047911391Z]: [talos] service[ext-cloudflared](Running): Started task ext-cloudflared (PID 72287) for container ext-cloudflared
192.168.86.20: user: warning: [2025-08-18T14:24:57.850985391Z]: [talos] service[ext-cloudflared](Waiting): Error running Containerd(ext-cloudflared), going to restart forever: task "ext-cloudflared" failed: exit code 255

talosctl get extensions

NODE            NAMESPACE   TYPE              ID            VERSION   NAME          VERSION
192.168.86.20   runtime     ExtensionStatus   0             1         btrfs         v1.10.6
192.168.86.20   runtime     ExtensionStatus   1             1         cloudflared   2024.12.1
192.168.86.20   runtime     ExtensionStatus   2             1         gvisor        20250505.0
192.168.86.20   runtime     ExtensionStatus   3             1         tailscale     1.84.0
192.168.86.20   runtime     ExtensionStatus   4             1         schematic     b220bb8278611260abd87be64e0dbdbaddd2602b64f2e51f378d63186329882a
192.168.86.20   runtime     ExtensionStatus   modules.dep   1         modules.dep   6.12.40-talos

talosctl get service | grep cloudflare

NODE            NAMESPACE   TYPE      ID              VERSION   RUNNING   HEALTHY   HEALTH UNKNOWN
192.168.86.20   runtime     Service   ext-cloudflared   1         true      false     true

talosctl logs ext-cloudflared

192.168.86.20: Provided Tunnel token is not valid.
192.168.86.20: See 'cloudflared tunnel run --help'.

Has anyone been able to successfully run Cloudflared in Talos ? How can we upgrade to the latest version ?

[frezbo]

Cloudflared is a community supported extension https://www.talos.dev/v1.11/talos-guides/configuration/system-extensions/#official-system-extension-tiers which falls under contrib.

Any fixes are relied upon by community support.