Cloudflared is a lightweight proxy client for securely connecting applications to Cloudflare’s network. It powers Cloudflare Tunnel, allowing services to be exposed without opening ports or configuring firewall rules. cloudflared
routes traffic through Cloudflare’s global network, enhancing security with DDoS protection, authentication, and encrypted connections. It supports HTTP, TCP, and QUIC, making it ideal for self-hosted services, remote access, and zero-trust networking.
Install with:
helm repo add bjw-s oci://ghcr.io/bjw-s/helm/
helm install cloudflared bjw-s/app-template -f values.yaml
See examples from other people.
Name | Repo | Stars | Version | Timestamp |
---|---|---|---|---|
cloudflared | axeII/home-ops | 47 | 3.7.3 | 5 days ago |
cloudflared | Pumba98/flux2-gitops | 65 | 3.7.3 | a month ago |
cloudflared | brettinternet/homeops | 250 | 3.5.1 | 9 months ago |
See the most popular values for this chart:
Key | Types |
---|---|
persistence.config.name (54) cloudflared-configmap | string |
persistence.config.type (54) configMap | string |
persistence.config.globalMounts[].path (48) /etc/cloudflared/config/config.yaml | string |
boolean | |
string | |
boolean | |
persistence.config.mountPath (6) /etc/cloudflared/config/config.yaml | string |
boolean | |
persistence.config.subPath (6) config.yaml | string |
persistence.creds.name (53) cloudflared-secret | string |
string | |
persistence.creds.globalMounts[].path (47) /etc/cloudflared/creds/credentials.json | string |
boolean | |
persistence.creds.globalMounts[].subPath (47) credentials.json | string |
boolean | |
persistence.creds.mountPath (6) /etc/cloudflared/creds/credentials.json | string |
boolean | |
persistence.creds.subPath (5) credentials.json | string |
persistence.config-file.globalMounts[].path (1) /etc/cloudflared/config/config.yaml | string |
boolean | |
string | |
persistence.config-file.name (1) cloudflared-configmap | string |
persistence.config-file.type (1) configMap | string |
persistence.credentials.globalMounts[].path (1) /etc/cloudflared/creds/credentials.json | string |
boolean | |
persistence.credentials.globalMounts[].subPath (1) credentials.json | string |
persistence.credentials.name (1) cloudflared-secret | string |
string | |
persistence.secret-file.globalMounts[].path (1) /etc/cloudflared/creds/credentials.json | string |
boolean | |
persistence.secret-file.globalMounts[].subPath (1) credentials.json | string |
persistence.secret-file.name (1) cloudflared-tunnel-secret | string |
string | |
string | |
controllers.cloudflared.strategy (37) RollingUpdate | string |
controllers.cloudflared.containers.app.args[] (36) - tunnel | string |
controllers.cloudflared.containers.app.env.TUNNEL_CRED_FILE (36) /etc/cloudflared/creds/credentials.json | string |
string | |
string | |
boolean, string | |
boolean | |
boolean | |
string | |
string | |
controllers.cloudflared.containers.app.env.TUNNEL_ID (2) c750bbca-6be2-4305-8ee7-ec1faf6316fe | string |
boolean | |
string | |
controllers.cloudflared.containers.app.env.TZ (1) Europe/Madrid | string |
controllers.cloudflared.containers.app.image.repository (36) docker.io/cloudflare/cloudflared | string |
string | |
boolean | |
boolean | |
number | |
string | |
number | |
number | |
number | |
number | |
boolean | |
boolean | |
number | |
string | |
number | |
number | |
number | |
number | |
boolean | |
string | |
string | |
string | |
boolean | |
string | |
string | |
boolean | |
string | |
controllers.cloudflared.containers.cloudflared.args[] (2) - tunnel | string |
boolean | |
controllers.cloudflared.containers.cloudflared.env.TUNNEL_CRED_FILE (2) /etc/cloudflared/creds/credentials.json | string |
string | |
string | |
string | |
boolean | |
string | |
boolean | |
controllers.cloudflared.containers.cloudflared.image.repository (2) docker.io/cloudflare/cloudflared | string |
string | |
boolean | |
boolean | |
number | |
string | |
number | |
number | |
number | |
number | |
boolean | |
boolean | |
number | |
string | |
number | |
number | |
number | |
number | |
boolean | |
string | |
string | |
boolean | |
string | |
boolean | |
string | |
number | |
number | |
number | |
boolean | |
number | |
string | |
string | |
number | |
controllers.cloudflared.pod.topologySpreadConstraints[].topologyKey (2) kubernetes.io/hostname | string |
string | |
controllers.cloudflared.pod.imagePullSecrets[].name (1) dockerhub-auth | string |
number | |
string | |
controllers.main.containers.main.args[] (10) - tunnel | string |
string, boolean | |
controllers.main.containers.main.env.TUNNEL_CRED_FILE (10) /etc/cloudflared/creds/credentials.json | string |
string | |
string | |
boolean | |
string | |
string | |
boolean | |
string | |
controllers.main.containers.main.image.repository (10) docker.io/cloudflare/cloudflared | string |
string | |
string | |
boolean | |
number | |
string | |
number | |
number | |
number | |
number | |
boolean | |
boolean | |
number | |
string | |
number | |
number | |
number | |
number | |
boolean | |
boolean | |
boolean | |
number | |
string | |
number | |
number | |
string | |
string | |
string | |
boolean | |
string | |
boolean | |
string | |
controllers.main.containers.cloudflared.args[] (1) - tunnel | string |
string | |
controllers.main.containers.cloudflared.env.TUNNEL_CRED_FILE (1) /etc/cloudflared/creds/credentials.json | string |
string | |
string | |
string | |
string | |
string | |
controllers.main.containers.cloudflared.image.repository (1) docker.io/cloudflare/cloudflared | string |
string | |
boolean | |
boolean | |
number | |
string | |
number | |
number | |
number | |
number | |
boolean | |
boolean | |
number | |
string | |
number | |
number | |
number | |
number | |
boolean | |
string | |
string | |
string | |
number | |
controllers.main.strategy (10) RollingUpdate | string |
number | |
number | |
boolean | |
string | |
number | |
controllers.main.pod.topologySpreadConstraints[].topologyKey (4) kubernetes.io/hostname | string |
string | |
controllers.main.pod.dnsPolicy (1) ClusterFirstWithHostNet | string |
boolean | |
boolean | |
service.app.controller (36) cloudflared | string |
number | |
number | |
boolean | |
string | |
boolean | |
service.cloudflared.controller (3) cloudflared | string |
number | |
string | |
string | |
number | |
service.udptest.type (1) LoadBalancer | string |
string | |
string | |
string | |
string | |
string | |
serviceMonitor.app.serviceName (34) cloudflared | string |
boolean | |
serviceMonitor.app.labels.app (1) cloudflared | string |
serviceMonitor.app.labels.release (1) kube-prometheus-stack | string |
boolean | |
string | |
string | |
string | |
string | |
string | |
serviceMonitor.main.serviceName (3) cloudflared | string |
string | |
string | |
string | |
string | |
string | |
serviceMonitor.cloudflared.serviceName (2) cloudflared | string |
number | |
boolean | |
number | |
string | |
string | |
number | |
defaultPodOptions.topologySpreadConstraints[].topologyKey (4) kubernetes.io/hostname | string |
string | |
args[] (6) - tunnel | string |
image.repository (6) docker.io/cloudflare/cloudflared | string |
image.tag (6) 2025.7.0 | string |
string | |
number | |
controller.strategy (5) RollingUpdate | string |
string | |
env.TUNNEL_CRED_FILE (5) /etc/cloudflared/creds/credentials.json | string |
string | |
env.TUNNEL_ID.valueFrom.secretKeyRef.name (5) cloudflared-secret | string |
env.TUNNEL_METRICS (5) 0.0.0.0:8080 | string |
string | |
boolean | |
boolean | |
boolean | |
number | |
string | |
string | |
number | |
number | |
number | |
boolean | |
boolean | |
number | |
string | |
string | |
number | |
number | |
number | |
boolean | |
string | |
string | |
string | |
string | |
boolean | |
string | |
string | |
number | |
string | |
string | |
networkpolicies.main.rules.egress[].to[].ipBlock.except[] (1) - "10.0.0.0/8" | string |
string | |
string | |
string |