This draft captures the practical work of creating a new cloudflared tunnel, replacing the Kubernetes secrets that hold the certificate and tunnel credentials, and updating the config map and deployment to run the new tunnel.
This draft captures a common cloudflared repair pattern: upgrade the binary, refresh the login material, and recreate the tunnel credentials rather than guessing at partially broken state.
This draft captures the practical shape of a cluster-side Cloudflare tunnel setup: install cloudflared, register the service, and use DNS-backed certificate workflows where needed.