diff --git a/doc/source/deploy/certificates.rst b/doc/source/deploy/certificates.rst
index 8c351c6b4..7d77d1b3d 100644
--- a/doc/source/deploy/certificates.rst
+++ b/doc/source/deploy/certificates.rst
@@ -176,6 +176,25 @@ following configuration:
    You'll need to make sure that your AWS credentials have the correct
    permissions to update the Route53 zone.
 
+Cloudflare
+**********
+
+If you are using Cloudflare to host the DNS for your domains, you can use the
+following configuration:
+
+.. code-block:: yaml
+
+  cluster_issuer_acme_email: user@example.com
+  cluster_issuer_acme_solver: cloudflare
+  cluster_issuer_acme_cloudflare_api_token: <CLOUDFLARE_API_TOKEN>
+
+If Cloudflare's account name is different from ACME Issuer's email address
+then also set:
+
+.. code-block:: yaml
+
+  cluster_issuer_acme_cloudflare_email: my-cloudflare-acc@example.com
+
 GoDaddy
 *******
 
@@ -190,6 +209,12 @@ configuration which depends on
   cluster_issuer_acme_godaddy_api_key: <GODADDY_API_KEY>
   cluster_issuer_acme_godaddy_secret_key: <GODADDY_SECRET_KEY>
 
+.. note::
+
+   GoDaddy DNS API has some limitations. To use it you need:
+    - Accounts with 10 or more domains
+    - Accounts with a Discount Domain Club subscription
+
 Infoblox
 ********