
4/27/2020 · Sam Rhea
What this post added
This post introduces the integration of Cloudflare Access and Argo Tunnel to secure kubectl access to Kubernetes clusters. It details how Argo Tunnel establishes a secure connection from the cluster to Cloudflare's network and how Cloudflare Access enforces identity checks via SSO before allowing kubectl commands to reach the Kubernetes API server. It also explains the client-side setup using `cloudflared` to create a SOCKS proxy for kubectl commands and the lessons learned from dogfooding this feature.