cloudflare-tunnel helm

No introduction found. Create it?

Install

Install with:

helm repo add cloudflare-tunnel oci://${CHART_REGISTRY:=ghcr.io}/bjw-s-labs/helm/app-template
helm install cloudflare-tunnel cloudflare-tunnel/cloudflare-tunnel -f values.yaml

Examples

See examples from other people.

Top Repositories (5 out of 49)

NameRepoStarsVersionTimestamp
cloudflare-tunnelblackjid/home-ops975.3.0a day ago
cloudflare-tunnelauricom/home-ops2115.3.02 days ago
cloudflare-tunnelkashalls/home-cluster1055.3.02 days ago
cloudflare-tunnelwaifulabs/infrastructure2345.3.02 days ago
cloudflare-tunnelharaldkoch/kochhaus-home1805.3.03 days ago

Values

See the most popular values for this chart:

KeyTypes
controllers.cloudflare-tunnel.annotations."reloader.stakater.com/auto" (49)
true
string
controllers.cloudflare-tunnel.strategy (49)
RollingUpdate
string
controllers.cloudflare-tunnel.containers.app.args[] (47)
- tunnel
- run
string
controllers.cloudflare-tunnel.containers.app.env.NO_AUTOUPDATE (47)
true
boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_METRICS (47)
0.0.0.0:8080
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_TRANSPORT_PROTOCOL (32)
quic
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_POST_QUANTUM (30)
true
boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (6)
true
boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_CRED_FILE (1)
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_EDGE_IP_VERSION (1)
number
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.key (1)
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.name (1)
string
controllers.cloudflare-tunnel.containers.app.image.repository (47)
docker.io/cloudflare/cloudflared
string
controllers.cloudflare-tunnel.containers.app.image.tag (47)
2026.10.1@sha256:a15a3b50b8dabd57ac2090e9484c0247dba9dfa1f0df4d298d4317f9d69eb2d5
string
controllers.cloudflare-tunnel.containers.app.probes.liveness.custom (47)
true
boolean
controllers.cloudflare-tunnel.containers.app.probes.liveness.enabled (47)
true
boolean
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.failureThreshold (47)
3
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.path (47)
/ready
string
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.port (47)
8080
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.initialDelaySeconds (47)
0
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.periodSeconds (47)
10
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.timeoutSeconds (47)
1
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.custom (47)
true
boolean
controllers.cloudflare-tunnel.containers.app.probes.readiness.enabled (47)
true
boolean
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.failureThreshold (47)
3
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.path (47)
/ready
string
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.port (47)
8080
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.initialDelaySeconds (47)
0
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.periodSeconds (47)
10
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.timeoutSeconds (47)
1
number
controllers.cloudflare-tunnel.containers.app.resources.limits.memory (47)
256Mi
string
controllers.cloudflare-tunnel.containers.app.resources.requests.cpu (47)
10m
string
controllers.cloudflare-tunnel.containers.app.resources.requests.memory (5)
string
controllers.cloudflare-tunnel.containers.app.securityContext.allowPrivilegeEscalation (47)
false
boolean
controllers.cloudflare-tunnel.containers.app.securityContext.capabilities.drop[] (47)
- ALL
string
controllers.cloudflare-tunnel.containers.app.securityContext.readOnlyRootFilesystem (47)
true
boolean
controllers.cloudflare-tunnel.containers.app.envFrom[].secretRef.name (44)
cloudflare-tunnel-secret
string
controllers.cloudflare-tunnel.containers.app.envFrom[].externalSecretRef.identifier (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.args[] (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.NO_AUTOUPDATE (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.TUNNEL_METRICS (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.envFrom[].secretRef.name (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.image.repository (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.image.tag (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.custom (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.enabled (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.failureThreshold (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.httpGet.path (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.httpGet.port (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.initialDelaySeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.periodSeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.timeoutSeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.custom (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.enabled (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.failureThreshold (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.httpGet.path (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.httpGet.port (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.initialDelaySeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.periodSeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.timeoutSeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.resources.limits.memory (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.resources.requests.cpu (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.allowPrivilegeEscalation (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.capabilities.drop[] (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.readOnlyRootFilesystem (2)
boolean
controllers.cloudflare-tunnel.replicas (32)
2
number, string
controllers.cloudflare-tunnel.podDisruptionBudget.maxUnavailable (1)
number
defaultPodOptions.securityContext.runAsGroup (49)
1000
number, string
defaultPodOptions.securityContext.runAsNonRoot (49)
true
boolean
defaultPodOptions.securityContext.runAsUser (49)
1000
number, string
defaultPodOptions.securityContext.seccompProfile.type (2)
string
defaultPodOptions.securityContext.fsGroup (1)
number
defaultPodOptions.securityContext.fsGroupChangePolicy (1)
string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (4)
cloudflare-tunnel
string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/controller" (1)
string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)
string
defaultPodOptions.topologySpreadConstraints[].maxSkew (4)
1
number
defaultPodOptions.topologySpreadConstraints[].topologyKey (4)
kubernetes.io/hostname
string
defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (4)
DoNotSchedule
string
defaultPodOptions.topologySpreadConstraints[].matchLabelKeys[] (1)
string
defaultPodOptions.topologySpreadConstraints[].nodeTaintsPolicy (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].key (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].operator (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].values[] (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)
number
defaultPodOptions.labels."egress.cilium.io/gateway-external" (1)
string
defaultPodOptions.labels."network.home.arpa/to-envoy-external" (1)
string
defaultPodOptions.labels."platform.home.arpa/tier" (1)
string
defaultPodOptions.tolerations[].effect (1)
string
defaultPodOptions.tolerations[].key (1)
string
defaultPodOptions.tolerations[].operator (1)
string
defaultPodOptions.tolerations[].value (1)
string
persistence.config-file.globalMounts[].path (47)
/etc/cloudflared/config.yaml
string
persistence.config-file.globalMounts[].subPath (47)
config.yaml
string
persistence.config-file.globalMounts[].readOnly (7)
true
boolean
persistence.config-file.type (47)
configMap
string
persistence.config-file.identifier (42)
config
string
persistence.config-file.name (5)
cloudflare-tunnel-configmap
string
persistence.config.globalMounts[].path (2)
string
persistence.config.globalMounts[].subPath (2)
string
persistence.config.globalMounts[].readOnly (1)
boolean
persistence.config.type (2)
string
persistence.config.enabled (1)
boolean
persistence.config.identifier (1)
string
persistence.config.name (1)
string
persistence.creds.globalMounts[].path (1)
string
persistence.creds.globalMounts[].readOnly (1)
boolean
persistence.creds.globalMounts[].subPath (1)
string
persistence.creds.name (1)
string
persistence.creds.type (1)
string
service.app.ports.http.port (47)
8080
number
service.cloudflare-tunnel.controller (2)
string
service.cloudflare-tunnel.ports.http.port (2)
number
serviceMonitor.app.endpoints[].port (47)
http
string
serviceMonitor.app.endpoints[].interval (1)
string
serviceMonitor.app.endpoints[].path (1)
string
serviceMonitor.app.endpoints[].scheme (1)
string
serviceMonitor.app.endpoints[].scrapeTimeout (1)
string
serviceMonitor.cloudflare-tunnel.endpoints[].port (2)
string
serviceMonitor.cloudflare-tunnel.serviceName (2)
string
configMaps.config.data."config.yaml" (43)
ingress: - hostname: "*.${SECRET_DOMAIN}" originRequest: http2Origin: true originServerName: external.${SECRET_DOMAIN} service: https://envoy-external.{{ .Release.Namespace }}.svc.cluster.local:443 - service: http_status:404
string
externalSecrets.cloudflare-tunnel.dataFrom[].extract.key (3)
string
externalSecrets.cloudflare-tunnel.secretStoreRef.kind (3)
ClusterSecretStore
string
externalSecrets.cloudflare-tunnel.secretStoreRef.name (3)
string
externalSecrets.cloudflare-tunnel.target.template.data.TUNNEL_TOKEN (3)
string
externalSecrets.cloudflare-tunnel.target.template.data.CLOUDFLARE_TUNNEL_ID (1)
string
externalSecrets.cloudflare-tunnel.target.template.mergePolicy (1)
string
externalSecrets.cloudflare-tunnel.target.template.type (1)
string
externalSecrets.cloudflare-tunnel.target.creationPolicy (1)
string
externalSecrets.cloudflare-tunnel.target.deletionPolicy (1)
string
externalSecrets.cloudflare-tunnel.target.name (1)
string
externalSecrets.cloudflare-tunnel.refreshInterval (1)
string
externalSecrets.cloudflare-tunnel.refreshPolicy (1)
string
externalSecrets.cloudflare-tunnel-secret.dataFrom[].extract.key (2)
string
externalSecrets.cloudflare-tunnel-secret.enabled (2)
boolean
externalSecrets.cloudflare-tunnel-secret.refreshInterval (2)
string
externalSecrets.cloudflare-tunnel-secret.secretStoreRef.kind (2)
string
externalSecrets.cloudflare-tunnel-secret.secretStoreRef.name (2)
string
externalSecrets.cloudflare-tunnel-secret.target.creationPolicy (2)
string
externalSecrets.cloudflare-tunnel-secret.target.deletionPolicy (2)
string
externalSecrets.cloudflare-tunnel-secret.target.name (2)
string
externalSecrets.cloudflare-tunnel-secret.target.template.data.TUNNEL_TOKEN (2)
string
externalSecrets.cloudflare-tunnel-secret.target.template.engineVersion (2)
string
fullnameOverride (1)
string