Cloudflared is a lightweight proxy client for securely connecting applications to Cloudflare’s network. It powers Cloudflare Tunnel, allowing services to be exposed without opening ports or configuring firewall rules. cloudflared
routes traffic through Cloudflare’s global network, enhancing security with DDoS protection, authentication, and encrypted connections. It supports HTTP, TCP, and QUIC, making it ideal for self-hosted services, remote access, and zero-trust networking.
cloudflared from bjw-s-labs/helm/app-template is more popular with 59 repositories.
Install with:
helm repo add bjw-s oci://ghcr.io/bjw-s/helm/
helm install cloudflared bjw-s/app-template -f values.yaml
See examples from other people.
Name | Repo | Stars | Version | Timestamp |
---|---|---|---|---|
cloudflared | Pumba98/flux2-gitops | 66 | 3.7.3 | 3 days ago |
cloudflared | brettinternet/homeops | 251 | 3.5.1 | 10 months ago |
See the most popular values for this chart:
Key | Types |
---|---|
persistence.config.name (45) cloudflared-configmap | string |
persistence.config.type (45) configMap | string |
persistence.config.globalMounts[].path (41) /etc/cloudflared/config/config.yaml | string |
boolean | |
string | |
boolean | |
persistence.config.mountPath (4) /etc/cloudflared/config/config.yaml | string |
boolean | |
persistence.config.subPath (4) config.yaml | string |
persistence.creds.name (44) cloudflared-secret | string |
string | |
persistence.creds.globalMounts[].path (40) /etc/cloudflared/creds/credentials.json | string |
boolean | |
persistence.creds.globalMounts[].subPath (40) credentials.json | string |
boolean | |
persistence.creds.mountPath (4) /etc/cloudflared/creds/credentials.json | string |
boolean | |
persistence.creds.subPath (3) credentials.json | string |
persistence.config-file.globalMounts[].path (1) /etc/cloudflared/config/config.yaml | string |
boolean | |
string | |
persistence.config-file.name (1) cloudflared-configmap | string |
persistence.config-file.type (1) configMap | string |
persistence.credentials.globalMounts[].path (1) /etc/cloudflared/creds/credentials.json | string |
boolean | |
persistence.credentials.globalMounts[].subPath (1) credentials.json | string |
persistence.credentials.name (1) cloudflared-secret | string |
string | |
persistence.secret-file.globalMounts[].path (1) /etc/cloudflared/creds/credentials.json | string |
boolean | |
persistence.secret-file.globalMounts[].subPath (1) credentials.json | string |
persistence.secret-file.name (1) cloudflared-tunnel-secret | string |
string | |
string | |
controllers.cloudflared.strategy (33) RollingUpdate | string |
controllers.cloudflared.containers.app.args[] (32) - tunnel | string |
controllers.cloudflared.containers.app.env.TUNNEL_CRED_FILE (32) /etc/cloudflared/creds/credentials.json | string |
string | |
string | |
boolean, string | |
boolean | |
boolean | |
string | |
string | |
controllers.cloudflared.containers.app.env.TUNNEL_ID (2) c750bbca-6be2-4305-8ee7-ec1faf6316fe | string |
boolean | |
string | |
controllers.cloudflared.containers.app.env.TZ (1) Europe/Madrid | string |
controllers.cloudflared.containers.app.image.repository (32) docker.io/cloudflare/cloudflared | string |
controllers.cloudflared.containers.app.image.tag (32) 2025.8.1@sha256:b77d84e8704db38db22c22661cf7e56468c526e3a6a5fe9c8b7c151452fa1472 | string |
boolean | |
boolean | |
number | |
string | |
number | |
number | |
number | |
number | |
boolean | |
boolean | |
number | |
string | |
number | |
number | |
number | |
number | |
boolean | |
string | |
string | |
string | |
boolean | |
string | |
string | |
boolean | |
string | |
controllers.cloudflared.containers.cloudflared.args[] (2) - tunnel | string |
boolean | |
controllers.cloudflared.containers.cloudflared.env.TUNNEL_CRED_FILE (2) /etc/cloudflared/creds/credentials.json | string |
string | |
string | |
string | |
boolean | |
string | |
boolean | |
controllers.cloudflared.containers.cloudflared.image.repository (2) docker.io/cloudflare/cloudflared | string |
string | |
boolean | |
boolean | |
number | |
string | |
number | |
number | |
number | |
number | |
boolean | |
boolean | |
number | |
string | |
number | |
number | |
number | |
number | |
boolean | |
string | |
string | |
boolean | |
string | |
boolean | |
string | |
number | |
number | |
number | |
boolean | |
number | |
string | |
string | |
number | |
controllers.cloudflared.pod.topologySpreadConstraints[].topologyKey (2) kubernetes.io/hostname | string |
string | |
controllers.cloudflared.pod.imagePullSecrets[].name (1) dockerhub-auth | string |
number | |
string | |
controllers.main.containers.main.args[] (7) - tunnel | string |
string, boolean | |
controllers.main.containers.main.env.TUNNEL_CRED_FILE (7) /etc/cloudflared/creds/credentials.json | string |
string | |
string | |
boolean | |
string | |
string | |
boolean | |
string | |
controllers.main.containers.main.image.repository (7) docker.io/cloudflare/cloudflared | string |
string | |
string | |
boolean | |
number | |
string | |
number | |
number | |
number | |
number | |
boolean | |
boolean | |
number | |
string | |
number | |
number | |
number | |
number | |
boolean | |
boolean | |
boolean | |
number | |
string | |
number | |
number | |
string | |
string | |
string | |
boolean | |
string | |
boolean | |
string | |
controllers.main.containers.cloudflared.args[] (1) - tunnel | string |
string | |
controllers.main.containers.cloudflared.env.TUNNEL_CRED_FILE (1) /etc/cloudflared/creds/credentials.json | string |
string | |
string | |
string | |
string | |
string | |
controllers.main.containers.cloudflared.image.repository (1) docker.io/cloudflare/cloudflared | string |
string | |
boolean | |
boolean | |
number | |
string | |
number | |
number | |
number | |
number | |
boolean | |
boolean | |
number | |
string | |
number | |
number | |
number | |
number | |
boolean | |
string | |
string | |
string | |
number | |
controllers.main.strategy (7) RollingUpdate | string |
number | |
number | |
boolean | |
string | |
number | |
controllers.main.pod.topologySpreadConstraints[].topologyKey (2) kubernetes.io/hostname | string |
string | |
controllers.main.pod.dnsPolicy (1) ClusterFirstWithHostNet | string |
boolean | |
service.app.controller (32) cloudflared | string |
number | |
number | |
boolean | |
string | |
boolean | |
service.cloudflared.controller (3) cloudflared | string |
number | |
string | |
string | |
number | |
service.udptest.type (1) LoadBalancer | string |
string | |
string | |
string | |
string | |
string | |
serviceMonitor.app.serviceName (30) cloudflared | string |
boolean | |
serviceMonitor.app.labels.app (1) cloudflared | string |
serviceMonitor.app.labels.release (1) kube-prometheus-stack | string |
boolean | |
string | |
string | |
string | |
string | |
string | |
serviceMonitor.main.serviceName (2) cloudflared | string |
string | |
string | |
string | |
string | |
string | |
serviceMonitor.cloudflared.serviceName (2) cloudflared | string |
number | |
boolean | |
number | |
string | |
string | |
number | |
defaultPodOptions.topologySpreadConstraints[].topologyKey (4) kubernetes.io/hostname | string |
string | |
args[] (4) - tunnel | string |
image.repository (4) docker.io/cloudflare/cloudflared | string |
image.tag (4) 2024.12.2 | string |
string | |
number | |
controller.strategy (3) RollingUpdate | string |
string | |
env.TUNNEL_CRED_FILE (3) /etc/cloudflared/creds/credentials.json | string |
string | |
env.TUNNEL_ID.valueFrom.secretKeyRef.name (3) cloudflared-secret | string |
env.TUNNEL_METRICS (3) 0.0.0.0:8080 | string |
string | |
boolean | |
boolean | |
boolean | |
number | |
string | |
string | |
number | |
number | |
number | |
boolean | |
boolean | |
number | |
string | |
string | |
number | |
number | |
number | |
boolean | |
string | |
string | |
string | |
string | |
boolean | |
string | |
string | |
number | |
string | |
string | |
networkpolicies.main.rules.egress[].to[].ipBlock.except[] (1) - "10.0.0.0/8" | string |
string | |
string | |
string |