There are some cool new features including in cloudflared, like MatchSNItoHost, which allow e2e https when using istio ingress gateway, but this operator does not currently expose it through TunnelBinding

https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/configure-tunnels/cloudflared-parameters/origin-parameters/

It would be great if this support could be added!