Cloudflare DNS wildcard certificate generation and add it into the K8s

cloudflare-wildcard-k8s.sh

#!/bin/bash
set -euo pipefail

# ==========================
# Configuration
# ==========================
TOKEN_VALUE="asldfjasdlfjas;ldf "
EMAIL="test@example.com"
DOMAIN="domain.com"
WILDCARD="*.domain.com"
CF_INI="cloudflare.ini"

# ==========================
# Create Cloudflare credentials file
# ==========================
cat > "$CF_INI" <<EOF
dns_cloudflare_api_token = $TOKEN_VALUE
EOF

chmod 600 "$CF_INI"

# ==========================
# Run Certbot
# ==========================
sudo certbot certonly \
  --manual \
  --preferred-challenges=dns \
  -d "$WILDCARD" \
  -d "$DOMAIN" \
  --manual-public-ip-logging-ok \
  --agree-tos \
  --no-eff-email \
  -m "$EMAIL"

sudo cp /etc/letsencrypt/live/$DOMAIN/fullchain.pem ./pub.key
sudo cp /etc/letsencrypt/live/$DOMAIN/privkey.pem ./priv.key
kubectl create secret tls wildcard-tls-secret --cert=./pub.key --key=./priv.key