cert-manager + Cloudflare DNS-01: Automated TLS for Everything

I spent two days chasing a cert-manager error that looked like it was coming from the future. The message was clean: Error: failed to solve challenge: failed to update DNS record: 403 Forbidden. I had followed the docs, created the API token, set up ...