Guest Blog: k8s tunnels with Kudelski Security
Dec 8, 2021Romain Aviolat
Summary
Kudelski Security developed an internal tool 'k8s-tunnels' that leverages Cloudflare Tunnel as an Identity-aware Proxy (IAP) to provide secure, automated access to Kubernetes clusters across multi-cloud environments. The tool automates the discovery of accessible K8s clusters based on Zero Trust policies, embeds the 'cloudflared' daemon, and configures local CLI clients (kubectl, k9s) to use a SOCKS5 proxy for authenticated access. This significantly improves developer experience and security posture by eliminating manual configuration and providing a single pane of visibility.
More from the Internal Service Exposure & Management with Spectrum trail
- Route public traffic to private applications with Cloudflare
- Secure private networking for everyone: users, nodes, agents, Workers — introducing Cloudflare Mesh
- How Automatic Return Routing solves IP overlap
- A QUICker SASE client: re-building Proxy Mode
- How Workers VPC Services connects to your regional private networks from anywhere in the world