This OriginIssuer resource creates a binding between cert-manager and the Cloudflare API for an account.

gistfile1.tf

data "kubectl_filename_list" "origin-ca-issuer" {
  pattern = "./origin-ca-issuer/issuer.yaml"
}

resource "kubectl_manifest" "origin-ca-issuer" {
  depends_on = [
    kubernetes_secret.origin-ca-key
  ]
  count = length(data.kubectl_filename_list.origin-ca-issuer.matches)
  yaml_body = file(element(data.kubectl_filename_list.origin-ca-issuer.matches, count.index))
}