===============
Cloud Providers
===============

Cloud providers connect Eyrie to external infrastructure services. They store
API credentials and expose operations like creating clusters, managing DNS, and
provisioning object storage buckets.

Supported Provider Types
========================

- **Linode** — Kubernetes (LKE) clusters, node pools, S3-compatible object
  storage.
- **Cloudflare** — DNS zone and record management.
- **Manual** — for clusters imported via kubeconfig without a cloud API.

Adding a Linode Provider
========================

1. Navigate to **Cloud Providers** in your project.
2. Click **Add Provider** and select **Linode**.
3. Paste your Linode **API Token** (Personal Access Token with read/write
   access to LKE, NodeBalancers, and Object Storage).
4. Click **Save**.

Adding a Cloudflare Provider
============================

1. Navigate to **Cloud Providers** in your project.
2. Click **Add Provider** and select **Cloudflare**.
3. Paste your Cloudflare **API Token** (with permissions for the DNS zones you
   want Eyrie to manage).
4. Click **Save**.

Global vs Project-Owned Providers
=================================

- **Project-owned** providers are scoped to a single project and only visible
  to that project's members.
- **Global** providers (``project_id`` is empty) are available to all projects.
  Only Eyrie administrators can create global providers.

Credential Verification
=======================

After saving, click **Verify Credentials**. Eyrie calls the provider's API to
confirm the token is valid. A green checkmark appears next to the provider name
when credentials are verified.

.. image:: /static/img/cloud_provider_form.png
   :alt: TODO — screenshot of the cloud provider form

.. image:: /static/img/cloud_provider_credential_ok.png
   :alt: TODO — screenshot of the credential verified indicator