Kubectl with Cloudflare Zero Trust

This post details the implementation of Cloudflare Zero Trust for securing Kubernetes API access, enabling kubectl usage without proxies. It describes the transition from VPN-based access to Cloudflare Tunnels and then to private network routing via the Zero Trust agent. The post provides Terraform configurations for creating Argo Tunnels and routes, setting up Cloudflare Gateway rules to bypass HTTP inspection for Kubernetes API traffic, and deploying tunnel endpoints as Kubernetes pods. It highlights the benefits of simplified onboarding and improved developer velocity.