Kubectl with Cloudflare Zero Trust

What this post added

This post details the implementation of Cloudflare Zero Trust to secure access to Kubernetes API servers for internal engineering teams. It describes the transition from VPN-based access to a solution using Cloudflare Tunnels and Zero Trust agent's private network routing, enabling kubectl access without proxies or complex tunnel configurations. The post provides Terraform configuration examples for setting up Argo Tunnels, Tunnel Routes, and Cloudflare Gateway rules to disable HTTP inspection for Kubernetes API traffic, along with Kubernetes deployment configurations for cloudflared tunnel endpoints.