cloudflare-tunnel helm

No introduction found. Create it?

Install

Install with:

helm repo add cloudflare-tunnel oci://${CHART_REGISTRY:=ghcr.io}/bjw-s-labs/helm/app-template
helm install cloudflare-tunnel cloudflare-tunnel/cloudflare-tunnel -f values.yaml

Examples

See examples from other people.

Top Repositories (5 out of 50)

NameRepoStarsVersionTimestamp
cloudflare-tunnelonedr0p/home-ops28905.2.12 days ago
cloudflare-tunneloscaromeu/home-ops345.2.12 days ago
cloudflare-tunnelkashalls/home-cluster1055.2.13 days ago
cloudflare-tunnelwaifulabs/infrastructure2325.2.13 days ago
cloudflare-tunnelharaldkoch/kochhaus-home1795.2.14 days ago

Values

See the most popular values for this chart:

KeyTypes
controllers.cloudflare-tunnel.annotations."reloader.stakater.com/auto" (50)
true
string
controllers.cloudflare-tunnel.strategy (50)
RollingUpdate
string
controllers.cloudflare-tunnel.containers.app.args[] (48)
- tunnel
- run
string
controllers.cloudflare-tunnel.containers.app.env.NO_AUTOUPDATE (48)
true
boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_METRICS (48)
0.0.0.0:8080
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_TRANSPORT_PROTOCOL (32)
quic
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_POST_QUANTUM (30)
true
boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (6)
true
boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_CRED_FILE (1)
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_EDGE_IP_VERSION (1)
number
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.key (1)
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.name (1)
string
controllers.cloudflare-tunnel.containers.app.image.repository (48)
docker.io/cloudflare/cloudflared
string
controllers.cloudflare-tunnel.containers.app.image.tag (48)
2026.9.3@sha256:072c067d25ccbe61d46e18f0d0723255f2bb5304f7317caa95b27031520ff92c
string
controllers.cloudflare-tunnel.containers.app.probes.liveness.custom (48)
true
boolean
controllers.cloudflare-tunnel.containers.app.probes.liveness.enabled (48)
true
boolean
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.failureThreshold (48)
3
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.path (48)
/ready
string
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.port (48)
8080
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.initialDelaySeconds (48)
0
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.periodSeconds (48)
10
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.timeoutSeconds (48)
1
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.custom (48)
true
boolean
controllers.cloudflare-tunnel.containers.app.probes.readiness.enabled (48)
true
boolean
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.failureThreshold (48)
3
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.path (48)
/ready
string
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.port (48)
8080
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.initialDelaySeconds (48)
0
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.periodSeconds (48)
10
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.timeoutSeconds (48)
1
number
controllers.cloudflare-tunnel.containers.app.resources.limits.memory (48)
256Mi
string
controllers.cloudflare-tunnel.containers.app.resources.requests.cpu (48)
10m
string
controllers.cloudflare-tunnel.containers.app.resources.requests.memory (5)
string
controllers.cloudflare-tunnel.containers.app.securityContext.allowPrivilegeEscalation (48)
false
boolean
controllers.cloudflare-tunnel.containers.app.securityContext.capabilities.drop[] (48)
- ALL
string
controllers.cloudflare-tunnel.containers.app.securityContext.readOnlyRootFilesystem (48)
true
boolean
controllers.cloudflare-tunnel.containers.app.envFrom[].secretRef.name (45)
cloudflare-tunnel-secret
string
controllers.cloudflare-tunnel.containers.app.envFrom[].externalSecretRef.identifier (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.args[] (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.NO_AUTOUPDATE (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.TUNNEL_METRICS (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.envFrom[].secretRef.name (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.image.repository (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.image.tag (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.custom (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.enabled (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.failureThreshold (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.httpGet.path (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.httpGet.port (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.initialDelaySeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.periodSeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.timeoutSeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.custom (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.enabled (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.failureThreshold (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.httpGet.path (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.httpGet.port (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.initialDelaySeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.periodSeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.timeoutSeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.resources.limits.memory (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.resources.requests.cpu (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.allowPrivilegeEscalation (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.capabilities.drop[] (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.readOnlyRootFilesystem (2)
boolean
controllers.cloudflare-tunnel.replicas (33)
2
number, string
controllers.cloudflare-tunnel.podDisruptionBudget.maxUnavailable (1)
number
defaultPodOptions.securityContext.runAsGroup (50)
1000
number, string
defaultPodOptions.securityContext.runAsNonRoot (50)
true
boolean
defaultPodOptions.securityContext.runAsUser (50)
1000
number, string
defaultPodOptions.securityContext.seccompProfile.type (2)
string
defaultPodOptions.securityContext.fsGroup (1)
number
defaultPodOptions.securityContext.fsGroupChangePolicy (1)
string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (4)
cloudflare-tunnel
string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/controller" (1)
string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)
string
defaultPodOptions.topologySpreadConstraints[].maxSkew (4)
1
number
defaultPodOptions.topologySpreadConstraints[].topologyKey (4)
kubernetes.io/hostname
string
defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (4)
DoNotSchedule
string
defaultPodOptions.topologySpreadConstraints[].nodeTaintsPolicy (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].key (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].operator (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].values[] (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)
number
defaultPodOptions.labels."network.home.arpa/to-envoy-external" (1)
string
defaultPodOptions.labels."platform.home.arpa/tier" (1)
string
defaultPodOptions.tolerations[].effect (1)
string
defaultPodOptions.tolerations[].key (1)
string
defaultPodOptions.tolerations[].operator (1)
string
defaultPodOptions.tolerations[].value (1)
string
persistence.config-file.globalMounts[].path (48)
/etc/cloudflared/config.yaml
string
persistence.config-file.globalMounts[].subPath (48)
config.yaml
string
persistence.config-file.globalMounts[].readOnly (7)
true
boolean
persistence.config-file.type (48)
configMap
string
persistence.config-file.identifier (43)
config
string
persistence.config-file.name (5)
cloudflare-tunnel-configmap
string
persistence.config.globalMounts[].path (2)
string
persistence.config.globalMounts[].subPath (2)
string
persistence.config.globalMounts[].readOnly (1)
boolean
persistence.config.type (2)
string
persistence.config.enabled (1)
boolean
persistence.config.identifier (1)
string
persistence.config.name (1)
string
persistence.creds.globalMounts[].path (1)
string
persistence.creds.globalMounts[].readOnly (1)
boolean
persistence.creds.globalMounts[].subPath (1)
string
persistence.creds.name (1)
string
persistence.creds.type (1)
string
service.app.ports.http.port (48)
8080
number
service.cloudflare-tunnel.controller (2)
string
service.cloudflare-tunnel.ports.http.port (2)
number
serviceMonitor.app.endpoints[].port (48)
http
string
serviceMonitor.app.endpoints[].interval (1)
string
serviceMonitor.app.endpoints[].path (1)
string
serviceMonitor.app.endpoints[].scheme (1)
string
serviceMonitor.app.endpoints[].scrapeTimeout (1)
string
serviceMonitor.cloudflare-tunnel.endpoints[].port (2)
string
serviceMonitor.cloudflare-tunnel.serviceName (2)
string
configMaps.config.data."config.yaml" (44)
ingress: - hostname: "*.${SECRET_DOMAIN}" originRequest: http2Origin: true originServerName: external.${SECRET_DOMAIN} service: https://envoy-external.{{ .Release.Namespace }}.svc.cluster.local:443 - service: http_status:404
string
externalSecrets.cloudflare-tunnel-secret.dataFrom[].extract.key (2)
string
externalSecrets.cloudflare-tunnel-secret.enabled (2)
boolean
externalSecrets.cloudflare-tunnel-secret.refreshInterval (2)
string
externalSecrets.cloudflare-tunnel-secret.secretStoreRef.kind (2)
string
externalSecrets.cloudflare-tunnel-secret.secretStoreRef.name (2)
string
externalSecrets.cloudflare-tunnel-secret.target.creationPolicy (2)
string
externalSecrets.cloudflare-tunnel-secret.target.deletionPolicy (2)
string
externalSecrets.cloudflare-tunnel-secret.target.name (2)
string
externalSecrets.cloudflare-tunnel-secret.target.template.data.TUNNEL_TOKEN (2)
string
externalSecrets.cloudflare-tunnel-secret.target.template.engineVersion (2)
string
externalSecrets.cloudflare-tunnel.dataFrom[].extract.key (2)
string
externalSecrets.cloudflare-tunnel.secretStoreRef.kind (2)
string
externalSecrets.cloudflare-tunnel.secretStoreRef.name (2)
string
externalSecrets.cloudflare-tunnel.target.template.data.TUNNEL_TOKEN (2)
string
externalSecrets.cloudflare-tunnel.target.template.mergePolicy (1)
string
externalSecrets.cloudflare-tunnel.target.template.type (1)
string
externalSecrets.cloudflare-tunnel.target.creationPolicy (1)
string
externalSecrets.cloudflare-tunnel.target.deletionPolicy (1)
string
externalSecrets.cloudflare-tunnel.target.name (1)
string
externalSecrets.cloudflare-tunnel.refreshInterval (1)
string
externalSecrets.cloudflare-tunnel.refreshPolicy (1)
string
externalSecrets.env.dataFrom[].extract.key (1)
string
externalSecrets.env.secretStoreRef.kind (1)
string
externalSecrets.env.secretStoreRef.name (1)
string
externalSecrets.env.target.template.data.TUNNEL_TOKEN (1)
string
fullnameOverride (1)
string
podDisruptionBudget.cloudflare-tunnel.controller (1)
string
podDisruptionBudget.cloudflare-tunnel.minAvailable (1)
number