outdated how to

[meb427]

Example URL(s)

https://developers.cloudflare.com/cloudflare-one/tutorials/many-cfd-one-tunnel/

Actual Behavior

outdated talk about argo url and following tutorial get error as there is pem missing and expected.

Expected Behavior

working step by step solution

Additional information

https://github.com/cloudflare/argo-tunnel-examples/tree/master/named-tunnel-k8s this is 3 year old same instructions?

[meb427]

Needd to fix volume as missing pem volume.
Container in example indeed 2002 outdated

apiVersion: apps/v1
kind: Deployment
metadata:
  name: cloudflared
spec:
  selector:
    matchLabels:
      app: cloudflared
  replicas: 1 # You could also consider elastic scaling for this deployment
  template:
    metadata:
      labels:
        app: cloudflared
    spec:
      containers:
        - name: cloudflared
          image: cloudflare/cloudflared:2024.3.0
          args:
            - tunnel
            # Points cloudflared to the config file, which configures what
            # cloudflared will actually do. This file is created by a ConfigMap
            # below.
            - --config
            - /etc/cloudflared/config/config.yaml
            - run
          livenessProbe:
            httpGet:
              # Cloudflared has a /ready endpoint which returns 200 if and only if
              # it has an active connection to the edge.
              path: /ready
              port: 2000
            failureThreshold: 1
            initialDelaySeconds: 10
            periodSeconds: 10
          env:
            - name: TUNNEL_ORIGIN_CERT
              value: "/etc/cloudflared/cert.pem"
          volumeMounts:
            - name: config
              mountPath: /etc/cloudflared/config
              readOnly: true
            # Each tunnel has an associated "credentials file" which authorizes machines
            # to run the tunnel. cloudflared will read this file from its local filesystem,
            # and it'll be stored in a k8s secret.
            - name: creds
              mountPath: /etc/cloudflared/creds
              readOnly: true
            - name: cert-vol
              mountPath: /etc/cloudflared
              readOnly: true
      volumes:
        - name: cert-vol
          secret:
            secretName: cloudflared-cert
        - name: creds
          secret:
            # By default, the credentials file will be created under ~/.cloudflared/<tunnel ID>.json
            # when you run `cloudflared tunnel create`. You can move it into a secret by using:
            # ```sh
            # kubectl create secret generic tunnel-credentials \
            # --from-file=credentials.json=/Users/yourusername/.cloudflared/<tunnel ID>.json
            # ```
            secretName: tunnel-credentials
        # Create a config.yaml file from the ConfigMap below.
        - name: config
          configMap:
            name: cloudflared
            items:
              - key: config.yaml
                path: config.yaml
---

Also the container now start with warnings

2024-03-31T13:41:16Z INF Environmental variables map[TUNNEL_ORIGIN_CERT:/etc/cloudflared/cert.pem]
2024-03-31T13:41:16Z INF Generated Connector ID: e81bdb2a-6296-486b-bf2d-e0a7ee6fc43f
2024-03-31T13:41:16Z INF Initial protocol quic
2024-03-31T13:41:16Z INF ICMP proxy will use 10.233.71.58 as source for IPv4
2024-03-31T13:41:16Z INF ICMP proxy will use fe80::9c61:edff:fe16:4bd3 in zone eth0 as source for IPv6
2024-03-31T13:41:16Z WRN The user running cloudflared process has a GID (group ID) that is not within ping_group_range. You might need to add that user to a group within that range, or instead update the range to encompass a group the user is already in by modifying /proc/sys/net/ipv4/ping_group_range. Otherwise cloudflared will not be able to ping this network error="Group ID 65532 is not between ping group 1 to 0"
2024-03-31T13:41:16Z WRN ICMP proxy feature is disabled error="cannot create ICMPv4 proxy: Group ID 65532 is not between ping group 1 to 0 nor ICMPv6 proxy: socket: permission denied"

Issue I see the tunnel up in cloudflare and healthy while not responding or any error.

[ranbel]

We've published a new how-to guide at https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/deployment-guides/kubernetes/.