Cloudflare Tunnel Login With Service Account

We use a Cloudflare Tunnel (fka Argo Tunnel) behind Cloudflare Access to control access to Kubernetes via kubectl.

We want to write a GitHub Action that will deploy to Kubernetes. It needs to login to a Cloudflare Tunnel to do so. It can’t use the usual human browser login. It will need to use a service account.

How do we do “cloudflared tunnel login” with a Service Account token?