tsrats/cloudflared repository overview

This is a Debian base image with the latest version of Cloudflare's Argo Tunnel software cloudflared built for ARM64 and AMD64.

To use this image with a Kubernetes cluster, first a certificate needs to be generated from another machine to authenticate to Cloudflare. The first two steps from Cloudflare's documentation can be used to create this certificate (https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/tunnel-guide/#set-up-a-tunnel-locally-cli-setup⁠).

1. Download the appropriate version of cloudflared for your machine.
2. Run cloudflared tunnel login to authenticate with Cloudflare. This should generate a file named cert.pem under ~/.cloudflared/.
3. Create a Kubernetes secret using this certificate file in the namespace where your deployment will run. kubectl create secret generic cloudflare --from-file=cert.pem=~/.cloudflared/cert.pem
4. Create a deployment, mounting this certificate file at /etc/cloudflared/cert.pem for the image to use.
5. Add the following arguments to the container: "cloudflared" "tunnel" "--no-autoupdate" "run" "--token" "TokenGeneratedWhenCreatingTunnelOnZeroTrustDashboard"
6. The tunnel should connect to the nearest Datacenters and show up as an endpoint on the Zero Trust Dashboard.