cloudflare-tunnel helm

No introduction found. Create it?

Install

Install with:

helm repo add cloudflare-tunnel oci://${CHART_REGISTRY:=ghcr.io}/bjw-s-labs/helm/app-template
helm install cloudflare-tunnel cloudflare-tunnel/cloudflare-tunnel -f values.yaml

Examples

See examples from other people.

Top Repositories (5 out of 55)

NameRepoStarsVersionTimestamp
cloudflare-tunnelcoolguy1771/home-ops775.3.014 hours ago
cloudflare-tunneloscaromeu/home-ops345.3.07 days ago
cloudflare-tunnelchr1sd/home-ops1925.3.08 days ago
cloudflare-tunnelblackjid/home-ops975.3.09 days ago
cloudflare-tunnelonedr0p/home-ops29205.3.010 days ago

Values

See the most popular values for this chart:

KeyTypes
defaultPodOptions.securityContext.runAsGroup (55)
1000
number, string
defaultPodOptions.securityContext.runAsNonRoot (55)
true
boolean
defaultPodOptions.securityContext.runAsUser (55)
1000
number, string
defaultPodOptions.securityContext.seccompProfile.type (3)
RuntimeDefault
string
defaultPodOptions.securityContext.fsGroup (1)
number
defaultPodOptions.securityContext.fsGroupChangePolicy (1)
string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (4)
cloudflare-tunnel
string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/controller" (1)
string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)
string
defaultPodOptions.topologySpreadConstraints[].maxSkew (4)
1
number
defaultPodOptions.topologySpreadConstraints[].topologyKey (4)
kubernetes.io/hostname
string
defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (4)
DoNotSchedule
string
defaultPodOptions.topologySpreadConstraints[].matchLabelKeys[] (1)
string
defaultPodOptions.topologySpreadConstraints[].nodeTaintsPolicy (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].key (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].operator (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].values[] (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)
number
defaultPodOptions.hostUsers (1)
boolean
defaultPodOptions.labels."egress.cilium.io/gateway-external" (1)
string
defaultPodOptions.labels."network.home.arpa/to-envoy-external" (1)
string
defaultPodOptions.labels."platform.home.arpa/tier" (1)
string
defaultPodOptions.tolerations[].effect (1)
string
defaultPodOptions.tolerations[].key (1)
string
defaultPodOptions.tolerations[].operator (1)
string
defaultPodOptions.tolerations[].value (1)
string
controllers.cloudflare-tunnel.annotations."reloader.stakater.com/auto" (54)
true
string
controllers.cloudflare-tunnel.strategy (53)
RollingUpdate
string
controllers.cloudflare-tunnel.containers.app.args[] (52)
- tunnel
- run
string
controllers.cloudflare-tunnel.containers.app.env.NO_AUTOUPDATE (52)
true
boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_METRICS (52)
0.0.0.0:8080
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_TRANSPORT_PROTOCOL (34)
quic
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_POST_QUANTUM (31)
true
boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (6)
true
boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_CRED_FILE (1)
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_EDGE_IP_VERSION (1)
number
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.key (1)
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.name (1)
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_LOG_OUTPUT (1)
string
controllers.cloudflare-tunnel.containers.app.image.repository (52)
docker.io/cloudflare/cloudflared
string
controllers.cloudflare-tunnel.containers.app.image.tag (52)
2026.10.7@sha256:4955524aeaa379e154023d5a027c250f7b35041a2e7e950cf13f144bc9b9c5ba
string
controllers.cloudflare-tunnel.containers.app.probes.liveness.custom (52)
true
boolean
controllers.cloudflare-tunnel.containers.app.probes.liveness.enabled (52)
true
boolean
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.path (52)
/ready
string
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.port (52)
8080
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.failureThreshold (49)
3
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.timeoutSeconds (49)
1
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.initialDelaySeconds (46)
0
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.periodSeconds (46)
10
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.custom (52)
true
boolean
controllers.cloudflare-tunnel.containers.app.probes.readiness.enabled (52)
true
boolean
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.path (52)
/ready
string
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.port (52)
8080
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.failureThreshold (49)
3
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.timeoutSeconds (49)
1
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.initialDelaySeconds (46)
0
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.periodSeconds (46)
10
number
controllers.cloudflare-tunnel.containers.app.probes.startup.custom (1)
boolean
controllers.cloudflare-tunnel.containers.app.probes.startup.enabled (1)
boolean
controllers.cloudflare-tunnel.containers.app.probes.startup.spec.failureThreshold (1)
number
controllers.cloudflare-tunnel.containers.app.probes.startup.spec.httpGet.path (1)
string
controllers.cloudflare-tunnel.containers.app.probes.startup.spec.httpGet.port (1)
number
controllers.cloudflare-tunnel.containers.app.probes.startup.spec.initialDelaySeconds (1)
number
controllers.cloudflare-tunnel.containers.app.probes.startup.spec.periodSeconds (1)
number
controllers.cloudflare-tunnel.containers.app.probes.startup.spec.timeoutSeconds (1)
number
controllers.cloudflare-tunnel.containers.app.resources.limits.memory (52)
256Mi
string
controllers.cloudflare-tunnel.containers.app.resources.requests.cpu (52)
10m
string
controllers.cloudflare-tunnel.containers.app.resources.requests.memory (7)
128Mi
string
controllers.cloudflare-tunnel.containers.app.securityContext.allowPrivilegeEscalation (52)
false
boolean
controllers.cloudflare-tunnel.containers.app.securityContext.capabilities.drop[] (52)
- ALL
string
controllers.cloudflare-tunnel.containers.app.securityContext.readOnlyRootFilesystem (52)
true
boolean
controllers.cloudflare-tunnel.containers.app.envFrom[].secretRef.name (49)
cloudflare-tunnel-secret
string
controllers.cloudflare-tunnel.containers.app.envFrom[].externalSecretRef.identifier (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.args[] (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.NO_AUTOUPDATE (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.TUNNEL_METRICS (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.envFrom[].secretRef.name (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.image.repository (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.image.tag (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.custom (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.enabled (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.failureThreshold (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.httpGet.path (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.httpGet.port (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.initialDelaySeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.periodSeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.timeoutSeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.custom (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.enabled (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.failureThreshold (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.httpGet.path (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.httpGet.port (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.initialDelaySeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.periodSeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.timeoutSeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.resources.limits.memory (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.resources.requests.cpu (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.allowPrivilegeEscalation (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.capabilities.drop[] (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.readOnlyRootFilesystem (2)
boolean
controllers.cloudflare-tunnel.replicas (34)
2
number, string
controllers.cloudflare-tunnel.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (2)
string
controllers.cloudflare-tunnel.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (2)
string
controllers.cloudflare-tunnel.pod.topologySpreadConstraints[].maxSkew (2)
number
controllers.cloudflare-tunnel.pod.topologySpreadConstraints[].topologyKey (2)
string
controllers.cloudflare-tunnel.pod.topologySpreadConstraints[].whenUnsatisfiable (2)
string
controllers.cloudflare-tunnel.podDisruptionBudget.maxUnavailable (1)
number
controllers.cloudflared.annotations."reloader.stakater.com/auto" (1)
string
controllers.cloudflared.containers.app.args[] (1)
string
controllers.cloudflared.containers.app.env.NO_AUTOUPDATE (1)
boolean
controllers.cloudflared.containers.app.env.TUNNEL_METRICS (1)
string
controllers.cloudflared.containers.app.envFrom[].externalSecretRef.identifier (1)
string
controllers.cloudflared.containers.app.image.repository (1)
string
controllers.cloudflared.containers.app.image.tag (1)
string
controllers.cloudflared.containers.app.probes.liveness.custom (1)
boolean
controllers.cloudflared.containers.app.probes.liveness.enabled (1)
boolean
controllers.cloudflared.containers.app.probes.liveness.spec.failureThreshold (1)
number
controllers.cloudflared.containers.app.probes.liveness.spec.httpGet.path (1)
string
controllers.cloudflared.containers.app.probes.liveness.spec.httpGet.port (1)
number
controllers.cloudflared.containers.app.probes.liveness.spec.initialDelaySeconds (1)
number
controllers.cloudflared.containers.app.probes.liveness.spec.periodSeconds (1)
number
controllers.cloudflared.containers.app.probes.liveness.spec.timeoutSeconds (1)
number
controllers.cloudflared.containers.app.probes.readiness.custom (1)
boolean
controllers.cloudflared.containers.app.probes.readiness.enabled (1)
boolean
controllers.cloudflared.containers.app.probes.readiness.spec.failureThreshold (1)
number
controllers.cloudflared.containers.app.probes.readiness.spec.httpGet.path (1)
string
controllers.cloudflared.containers.app.probes.readiness.spec.httpGet.port (1)
number
controllers.cloudflared.containers.app.probes.readiness.spec.initialDelaySeconds (1)
number
controllers.cloudflared.containers.app.probes.readiness.spec.periodSeconds (1)
number
controllers.cloudflared.containers.app.probes.readiness.spec.timeoutSeconds (1)
number
controllers.cloudflared.containers.app.resources.limits.memory (1)
string
controllers.cloudflared.containers.app.resources.requests.cpu (1)
string
controllers.cloudflared.containers.app.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.cloudflared.containers.app.securityContext.capabilities.drop[] (1)
string
controllers.cloudflared.containers.app.securityContext.readOnlyRootFilesystem (1)
boolean
controllers.cloudflared.replicas (1)
number
controllers.cloudflared.strategy (1)
string
service.app.ports.http.port (53)
8080
number
service.cloudflare-tunnel.controller (2)
string
service.cloudflare-tunnel.ports.http.port (2)
number
persistence.config-file.globalMounts[].path (52)
/etc/cloudflared/config.yaml
string
persistence.config-file.globalMounts[].subPath (52)
config.yaml
string
persistence.config-file.globalMounts[].readOnly (7)
true
boolean
persistence.config-file.type (52)
configMap
string
persistence.config-file.identifier (47)
config
string
persistence.config-file.name (5)
cloudflare-tunnel-configmap
string
persistence.config.globalMounts[].path (3)
string
persistence.config.globalMounts[].subPath (3)
config.yaml
string
persistence.config.globalMounts[].readOnly (2)
boolean
persistence.config.type (3)
configMap
string
persistence.config.identifier (2)
string
persistence.config.enabled (1)
boolean
persistence.config.name (1)
string
persistence.creds.globalMounts[].path (1)
string
persistence.creds.globalMounts[].readOnly (1)
boolean
persistence.creds.globalMounts[].subPath (1)
string
persistence.creds.name (1)
string
persistence.creds.type (1)
string
serviceMonitor.app.endpoints[].port (52)
http
string
serviceMonitor.app.endpoints[].interval (2)
string
serviceMonitor.app.endpoints[].path (2)
string
serviceMonitor.app.endpoints[].scheme (2)
string
serviceMonitor.app.endpoints[].scrapeTimeout (2)
string
serviceMonitor.cloudflare-tunnel.endpoints[].port (2)
string
serviceMonitor.cloudflare-tunnel.serviceName (2)
string
configMaps.config.data."config.yaml" (49)
ingress: - hostname: "*.${SECRET_DOMAIN}" originRequest: http2Origin: true originServerName: external.${SECRET_DOMAIN} service: https://envoy-external.{{ .Release.Namespace }}.svc.cluster.local:443 - service: http_status:404
string
externalSecrets.cloudflare-tunnel.dataFrom[].extract.key (3)
string
externalSecrets.cloudflare-tunnel.secretStoreRef.kind (3)
ClusterSecretStore
string
externalSecrets.cloudflare-tunnel.secretStoreRef.name (3)
string
externalSecrets.cloudflare-tunnel.target.template.data.TUNNEL_TOKEN (3)
string
externalSecrets.cloudflare-tunnel.target.template.data.CLOUDFLARE_TUNNEL_ID (1)
string
externalSecrets.cloudflare-tunnel.target.template.mergePolicy (1)
string
externalSecrets.cloudflare-tunnel.target.template.type (1)
string
externalSecrets.cloudflare-tunnel.target.creationPolicy (1)
string
externalSecrets.cloudflare-tunnel.target.deletionPolicy (1)
string
externalSecrets.cloudflare-tunnel.target.name (1)
string
externalSecrets.cloudflare-tunnel.refreshInterval (1)
string
externalSecrets.cloudflare-tunnel.refreshPolicy (1)
string
externalSecrets.cloudflare-tunnel-secret.dataFrom[].extract.key (2)
string
externalSecrets.cloudflare-tunnel-secret.enabled (2)
boolean
externalSecrets.cloudflare-tunnel-secret.refreshInterval (2)
string
externalSecrets.cloudflare-tunnel-secret.secretStoreRef.kind (2)
string
externalSecrets.cloudflare-tunnel-secret.secretStoreRef.name (2)
string
externalSecrets.cloudflare-tunnel-secret.target.creationPolicy (2)
string
externalSecrets.cloudflare-tunnel-secret.target.deletionPolicy (2)
string
externalSecrets.cloudflare-tunnel-secret.target.name (2)
string
externalSecrets.cloudflare-tunnel-secret.target.template.data.TUNNEL_TOKEN (2)
string
externalSecrets.cloudflare-tunnel-secret.target.template.engineVersion (2)
string
externalSecrets.app.dataFrom[].extract.key (1)
string
externalSecrets.app.forceRename (1)
string
externalSecrets.app.secretStoreRef.kind (1)
string
externalSecrets.app.secretStoreRef.name (1)
string
externalSecrets.app.target.name (1)
string
externalSecrets.app.target.template.data.TUNNEL_TOKEN (1)
string
externalSecrets.app.target.template.engineVersion (1)
string
externalSecrets.env.dataFrom[].extract.key (1)
string
externalSecrets.env.target.template.data.TUNNEL_TOKEN (1)
string
defaultExternalSecretStoreRef.kind (1)
string
defaultExternalSecretStoreRef.name (1)
string
fullnameOverride (1)
string