One of the ways I have found is using Hashicorp Vault as a secrets engine for minting Cloudflare Access service tokens. This Vault plugin allows you to manage Cloudflare tokens.