Skip to content

docs(k8s): Simplify tunnel secret creation in deployment guide #25751

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: production
Choose a base branch
from
+7 −19
Open

docs(k8s): Simplify tunnel secret creation in deployment guide #25751

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 7 additions & 19 deletions ...cs/cloudflare-one/connections/connect-networks/deployment-guides/kubernetes.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -169,38 +169,26 @@ Leave the Cloudflare Tunnel browser tab open while we focus on the Kubernetes de

## 4. Store the tunnel token

`cloudflared` uses a tunnel token to run a remotely-managed Cloudflare Tunnel. You can store the tunnel token in a [Kubernetes secret](https://kubernetes.io/docs/concepts/configuration/secret/), which requires data to be encoded as a base64-encoded string. The encoding is not meant to protect the token from being read but to allow for the safe handling of binary data within Kubernetes.
`cloudflared` uses a tunnel token to run a remotely-managed Cloudflare Tunnel. You can store the tunnel token in a [Kubernetes secret](https://kubernetes.io/docs/concepts/configuration/secret/).

1. Convert the tunnel token into base64 format:

```sh
'eyJhIjoiNWFiNGU5Z...' | base64
```

```sh output
ZXlKa...NKOQo=
```

2. In GKE Cloud Shell, create a `tunnel-token.yaml` file with the following content. Make sure to replace `<base64_tunnel_token>` with your base64-encoded token value (`ZXlKa...NKOQo=`).
1. In GKE Cloud Shell, create a `tunnel-token.yaml` file with the following content. Make sure to replace `<YOUR_TUNNEL_TOKEN>` with your tunnel token (`eyJhIjoiNWFiNGU5Z...`).

```yaml title="tunnel-token.yaml"
apiVersion: v1
data:
token: <base64_tunnel_token>
kind: Secret
metadata:
name: tunnel-token
namespace: default
type: Opaque
name: tunnel-token
stringData:
token: <YOUR_TUNNEL_TOKEN>
```

3. Create the secret:
2. Create the secret:

```sh
kubectl create -f tunnel-token.yaml
```

4. Check the newly created secret:
3. Check the newly created secret:

```sh
kubectl get secrets
Expand Down