cloudflared helm

Cloudflared is a lightweight proxy client for securely connecting applications to Cloudflare’s network. It powers Cloudflare Tunnel, allowing services to be exposed without opening ports or configuring firewall rules. cloudflared routes traffic through Cloudflare’s global network, enhancing security with DDoS protection, authentication, and encrypted connections. It supports HTTP, TCP, and QUIC, making it ideal for self-hosted services, remote access, and zero-trust networking.

Install

Install with:

helm repo add app-template oci://ghcr.io/bjw-s-labs/charts/
helm install cloudflared app-template/app-template -f values.yaml

Examples

See examples from other people.

Top Repositories (5 out of 46)

NameRepoStarsVersionTimestamp
cloudflaredadampetrovic/home-ops315.3.03 days ago
cloudflaredPumba98/flux2-gitops705.3.05 days ago
cloudflaredlarivierec/home-cluster1575.3.06 days ago
cloudflaredszinn/k8s-homelab3185.3.06 days ago
cloudflaredjfroy/flatops455.3.07 days ago

Values

See the most popular values for this chart:

KeyTypes
persistence.config.globalMounts[].path (41)
/etc/cloudflared/config/config.yaml
string
persistence.config.globalMounts[].subPath (41)
config.yaml
string
persistence.config.globalMounts[].readOnly (40)
true
boolean
persistence.config.type (41)
configMap
string
persistence.config.name (39)
cloudflared-configmap
string
persistence.config.enabled (5)
true
boolean
persistence.config.identifier (2)
string
persistence.creds.globalMounts[].path (34)
/etc/cloudflared/creds/credentials.json
string
persistence.creds.globalMounts[].readOnly (34)
true
boolean
persistence.creds.globalMounts[].subPath (34)
credentials.json
string
persistence.creds.name (34)
cloudflared-secret
string
persistence.creds.type (34)
secret
string
persistence.creds.enabled (1)
boolean
persistence.config-file.globalMounts[].path (5)
/etc/cloudflared/config.yaml
string
persistence.config-file.globalMounts[].subPath (5)
config.yaml
string
persistence.config-file.globalMounts[].readOnly (2)
boolean
persistence.config-file.type (5)
configMap
string
persistence.config-file.identifier (3)
config
string
persistence.config-file.name (2)
string
persistence.credentials.globalMounts[].path (3)
string
persistence.credentials.globalMounts[].subPath (3)
string
persistence.credentials.globalMounts[].readOnly (2)
boolean
persistence.credentials.name (3)
string
persistence.credentials.type (3)
secret
string
persistence.secret-file.globalMounts[].path (1)
string
persistence.secret-file.globalMounts[].readOnly (1)
boolean
persistence.secret-file.globalMounts[].subPath (1)
string
persistence.secret-file.name (1)
string
persistence.secret-file.type (1)
string
controllers.cloudflared.strategy (39)
RollingUpdate
string
controllers.cloudflared.containers.app.args[] (38)
- tunnel
- --config
- /etc/cloudflared/config/config.yaml
- run
- $(TUNNEL_ID)
string
controllers.cloudflared.containers.app.image.repository (38)
docker.io/cloudflare/cloudflared
string
controllers.cloudflared.containers.app.image.tag (38)
2026.10.7@sha256:4955524aeaa379e154023d5a027c250f7b35041a2e7e950cf13f144bc9b9c5ba
string
controllers.cloudflared.containers.app.resources.requests.cpu (38)
10m
string
controllers.cloudflared.containers.app.resources.requests.memory (14)
64Mi
string
controllers.cloudflared.containers.app.resources.limits.memory (37)
256Mi
string
controllers.cloudflared.containers.app.resources.limits.cpu (1)
string
controllers.cloudflared.containers.app.probes.readiness.enabled (37)
true
boolean
controllers.cloudflared.containers.app.probes.readiness.custom (36)
true
boolean
controllers.cloudflared.containers.app.probes.readiness.spec.httpGet.path (36)
/ready
string
controllers.cloudflared.containers.app.probes.readiness.spec.httpGet.port (36)
8080
number
controllers.cloudflared.containers.app.probes.readiness.spec.initialDelaySeconds (35)
0
number
controllers.cloudflared.containers.app.probes.readiness.spec.periodSeconds (35)
10
number
controllers.cloudflared.containers.app.probes.readiness.spec.failureThreshold (34)
3
number
controllers.cloudflared.containers.app.probes.readiness.spec.timeoutSeconds (34)
1
number
controllers.cloudflared.containers.app.probes.readiness.path (1)
string
controllers.cloudflared.containers.app.probes.readiness.type (1)
string
controllers.cloudflared.containers.app.probes.liveness.enabled (36)
true
boolean
controllers.cloudflared.containers.app.probes.liveness.custom (35)
true
boolean
controllers.cloudflared.containers.app.probes.liveness.spec.httpGet.path (35)
/ready
string
controllers.cloudflared.containers.app.probes.liveness.spec.httpGet.port (35)
8080
number
controllers.cloudflared.containers.app.probes.liveness.spec.initialDelaySeconds (35)
0
number
controllers.cloudflared.containers.app.probes.liveness.spec.periodSeconds (35)
10
number
controllers.cloudflared.containers.app.probes.liveness.spec.failureThreshold (34)
3
number
controllers.cloudflared.containers.app.probes.liveness.spec.timeoutSeconds (34)
1
number
controllers.cloudflared.containers.app.probes.liveness.path (1)
string
controllers.cloudflared.containers.app.probes.liveness.type (1)
string
controllers.cloudflared.containers.app.probes.startup.enabled (9)
false
boolean
controllers.cloudflared.containers.app.probes.startup.custom (2)
boolean
controllers.cloudflared.containers.app.probes.startup.spec.failureThreshold (2)
number
controllers.cloudflared.containers.app.probes.startup.spec.httpGet.path (2)
string
controllers.cloudflared.containers.app.probes.startup.spec.httpGet.port (2)
number
controllers.cloudflared.containers.app.probes.startup.spec.periodSeconds (2)
number
controllers.cloudflared.containers.app.probes.startup.spec.initialDelaySeconds (1)
number
controllers.cloudflared.containers.app.probes.startup.spec.timeoutSeconds (1)
number
controllers.cloudflared.containers.app.env.NO_AUTOUPDATE (36)
true
boolean, string
controllers.cloudflared.containers.app.env.TUNNEL_METRICS (36)
0.0.0.0:8080
string
controllers.cloudflared.containers.app.env.TUNNEL_TRANSPORT_PROTOCOL (35)
quic
string
controllers.cloudflared.containers.app.env.TUNNEL_POST_QUANTUM (33)
true
boolean
controllers.cloudflared.containers.app.env.TUNNEL_CRED_FILE (29)
/etc/cloudflared/creds/credentials.json
string
controllers.cloudflared.containers.app.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (28)
true
boolean
controllers.cloudflared.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.key (18)
TUNNEL_ID
string
controllers.cloudflared.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.name (18)
cloudflared-secret
string
controllers.cloudflared.containers.app.env.TUNNEL_ID (2)
string
controllers.cloudflared.containers.app.env.TUNNEL_MANAGEMENT_DIAGNOSTICS (2)
boolean, string
controllers.cloudflared.containers.app.env.TUNNEL_EDGE_IP_VERSION (1)
number
controllers.cloudflared.containers.app.env.TUNNEL_TOKEN.valueFrom.secretKeyRef.key (1)
string
controllers.cloudflared.containers.app.env.TUNNEL_TOKEN.valueFrom.secretKeyRef.name (1)
string
controllers.cloudflared.containers.app.env.TZ (1)
string
controllers.cloudflared.containers.app.securityContext.allowPrivilegeEscalation (35)
false
boolean
controllers.cloudflared.containers.app.securityContext.capabilities.drop[] (35)
- ALL
string
controllers.cloudflared.containers.app.securityContext.capabilities.add[] (1)
string
controllers.cloudflared.containers.app.securityContext.readOnlyRootFilesystem (35)
true
boolean
controllers.cloudflared.containers.app.securityContext.seccompProfile.type (2)
string
controllers.cloudflared.containers.app.envFrom[].secretRef.name (8)
cloudflared-secret
string
controllers.cloudflared.containers.cloudflared.args[] (4)
- tunnel
- --config
- /etc/cloudflared/config/config.yaml
- run
- $(TUNNEL_ID)
string
controllers.cloudflared.containers.cloudflared.env.TUNNEL_ID.valueFrom.secretKeyRef.key (4)
TUNNEL_ID
string
controllers.cloudflared.containers.cloudflared.env.TUNNEL_ID.valueFrom.secretKeyRef.name (4)
cloudflared-secret
string
controllers.cloudflared.containers.cloudflared.env.NO_AUTOUPDATE (3)
true
boolean
controllers.cloudflared.containers.cloudflared.env.TUNNEL_CRED_FILE (3)
/etc/cloudflared/creds/credentials.json
string
controllers.cloudflared.containers.cloudflared.env.TUNNEL_METRICS (3)
0.0.0.0:8080
string
controllers.cloudflared.containers.cloudflared.env.TUNNEL_TRANSPORT_PROTOCOL (3)
string
controllers.cloudflared.containers.cloudflared.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (2)
boolean
controllers.cloudflared.containers.cloudflared.env.TUNNEL_POST_QUANTUM (2)
boolean
controllers.cloudflared.containers.cloudflared.env.TUNNEL_TOKEN.valueFrom.secretKeyRef.key (1)
string
controllers.cloudflared.containers.cloudflared.env.TUNNEL_TOKEN.valueFrom.secretKeyRef.name (1)
string
controllers.cloudflared.containers.cloudflared.image.repository (4)
docker.io/cloudflare/cloudflared
string
controllers.cloudflared.containers.cloudflared.image.tag (4)
string
controllers.cloudflared.containers.cloudflared.probes.liveness.custom (4)
true
boolean
controllers.cloudflared.containers.cloudflared.probes.liveness.enabled (4)
true
boolean
controllers.cloudflared.containers.cloudflared.probes.liveness.spec.httpGet.path (4)
/ready
string
controllers.cloudflared.containers.cloudflared.probes.liveness.spec.httpGet.port (4)
8080
number
controllers.cloudflared.containers.cloudflared.probes.liveness.spec.failureThreshold (3)
3
number
controllers.cloudflared.containers.cloudflared.probes.liveness.spec.initialDelaySeconds (3)
0
number
controllers.cloudflared.containers.cloudflared.probes.liveness.spec.periodSeconds (3)
10
number
controllers.cloudflared.containers.cloudflared.probes.liveness.spec.timeoutSeconds (3)
1
number
controllers.cloudflared.containers.cloudflared.probes.readiness.custom (4)
true
boolean
controllers.cloudflared.containers.cloudflared.probes.readiness.enabled (4)
true
boolean
controllers.cloudflared.containers.cloudflared.probes.readiness.spec.httpGet.path (4)
/ready
string
controllers.cloudflared.containers.cloudflared.probes.readiness.spec.httpGet.port (4)
8080
number
controllers.cloudflared.containers.cloudflared.probes.readiness.spec.failureThreshold (3)
3
number
controllers.cloudflared.containers.cloudflared.probes.readiness.spec.initialDelaySeconds (3)
0
number
controllers.cloudflared.containers.cloudflared.probes.readiness.spec.periodSeconds (3)
10
number
controllers.cloudflared.containers.cloudflared.probes.readiness.spec.timeoutSeconds (3)
1
number
controllers.cloudflared.containers.cloudflared.probes.startup.enabled (2)
boolean
controllers.cloudflared.containers.cloudflared.probes.startup.custom (1)
boolean
controllers.cloudflared.containers.cloudflared.probes.startup.spec.failureThreshold (1)
number
controllers.cloudflared.containers.cloudflared.probes.startup.spec.httpGet.path (1)
string
controllers.cloudflared.containers.cloudflared.probes.startup.spec.httpGet.port (1)
number
controllers.cloudflared.containers.cloudflared.probes.startup.spec.periodSeconds (1)
number
controllers.cloudflared.containers.cloudflared.securityContext.allowPrivilegeEscalation (4)
false
boolean
controllers.cloudflared.containers.cloudflared.securityContext.capabilities.drop[] (4)
- ALL
string
controllers.cloudflared.containers.cloudflared.securityContext.readOnlyRootFilesystem (4)
true
boolean
controllers.cloudflared.containers.cloudflared.securityContext.seccompProfile.type (1)
string
controllers.cloudflared.containers.cloudflared.resources.limits.memory (3)
string
controllers.cloudflared.containers.cloudflared.resources.requests.cpu (3)
string
controllers.cloudflared.containers.cloudflared.resources.requests.memory (1)
string
controllers.cloudflared.annotations."reloader.stakater.com/auto" (36)
true
string
controllers.cloudflared.annotations."configmap.reloader.stakater.com/reload" (1)
string
controllers.cloudflared.annotations."secret.reloader.stakater.com/reload" (1)
string
controllers.cloudflared.replicas (30)
2
number
controllers.cloudflared.pod.securityContext.runAsGroup (10)
568
number
controllers.cloudflared.pod.securityContext.runAsUser (10)
568
number
controllers.cloudflared.pod.securityContext.runAsNonRoot (9)
true
boolean
controllers.cloudflared.pod.securityContext.seccompProfile.type (2)
string
controllers.cloudflared.pod.securityContext.fsGroup (1)
number
controllers.cloudflared.pod.securityContext.fsGroupChangePolicy (1)
string
controllers.cloudflared.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (4)
cloudflared
string
controllers.cloudflared.pod.topologySpreadConstraints[].maxSkew (4)
1
number
controllers.cloudflared.pod.topologySpreadConstraints[].topologyKey (4)
kubernetes.io/hostname
string
controllers.cloudflared.pod.topologySpreadConstraints[].whenUnsatisfiable (4)
DoNotSchedule
string
controllers.cloudflared.pod.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.labelSelector.matchLabels."app.kubernetes.io/name" (1)
string
controllers.cloudflared.pod.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.topologyKey (1)
string
controllers.cloudflared.pod.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)
number
controllers.cloudflared.pod.imagePullSecrets[].name (1)
string
controllers.cloudflared.pod.priorityClassName (1)
string
controllers.cloudflared.pod.terminationGracePeriodSeconds (1)
number
controllers.cloudflared.podDisruptionBudget.minAvailable (4)
1
number
controllers.cloudflared.rollingUpdate.unavailable (2)
number, string
controllers.cloudflared.rollingUpdate.surge (1)
number
controllers.main.annotations."reloader.stakater.com/auto" (3)
true
string
controllers.main.containers.main.args[] (2)
string
controllers.main.containers.main.env.NO_AUTOUPDATE (2)
string
controllers.main.containers.main.env.TUNNEL_CRED_FILE (2)
string
controllers.main.containers.main.env.TUNNEL_METRICS (2)
string
controllers.main.containers.main.env.TUNNEL_POST_QUANTUM (2)
boolean
controllers.main.containers.main.env.TUNNEL_TRANSPORT_PROTOCOL (2)
string
controllers.main.containers.main.env.TUNNEL_ID.valueFrom.secretKeyRef.key (1)
string
controllers.main.containers.main.env.TUNNEL_ID.valueFrom.secretKeyRef.name (1)
string
controllers.main.containers.main.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (1)
boolean
controllers.main.containers.main.image.repository (2)
string
controllers.main.containers.main.image.tag (2)
string
controllers.main.containers.main.image.pullPolicy (1)
string
controllers.main.containers.main.probes.liveness.custom (2)
boolean
controllers.main.containers.main.probes.liveness.spec.failureThreshold (2)
number
controllers.main.containers.main.probes.liveness.spec.httpGet.path (2)
string
controllers.main.containers.main.probes.liveness.spec.httpGet.port (2)
number
controllers.main.containers.main.probes.liveness.spec.initialDelaySeconds (2)
number
controllers.main.containers.main.probes.liveness.spec.periodSeconds (2)
number
controllers.main.containers.main.probes.liveness.spec.timeoutSeconds (2)
number
controllers.main.containers.main.probes.liveness.enabled (1)
boolean
controllers.main.containers.main.probes.readiness.custom (2)
boolean
controllers.main.containers.main.probes.readiness.spec.failureThreshold (2)
number
controllers.main.containers.main.probes.readiness.spec.httpGet.path (2)
string
controllers.main.containers.main.probes.readiness.spec.httpGet.port (2)
number
controllers.main.containers.main.probes.readiness.spec.initialDelaySeconds (2)
number
controllers.main.containers.main.probes.readiness.spec.periodSeconds (2)
number
controllers.main.containers.main.probes.readiness.spec.timeoutSeconds (2)
number
controllers.main.containers.main.probes.readiness.enabled (1)
boolean
controllers.main.containers.main.probes.startup.enabled (2)
boolean
controllers.main.containers.main.resources.limits.memory (1)
string
controllers.main.containers.main.resources.requests.cpu (1)
string
controllers.main.containers.main.resources.requests.memory (1)
string
controllers.main.containers.cloudflared.args[] (1)
string
controllers.main.containers.cloudflared.env.NO_AUTOUPDATE (1)
string
controllers.main.containers.cloudflared.env.TUNNEL_CRED_FILE (1)
string
controllers.main.containers.cloudflared.env.TUNNEL_ID.valueFrom.secretKeyRef.key (1)
string
controllers.main.containers.cloudflared.env.TUNNEL_ID.valueFrom.secretKeyRef.name (1)
string
controllers.main.containers.cloudflared.env.TUNNEL_METRICS (1)
string
controllers.main.containers.cloudflared.env.TUNNEL_TRANSPORT_PROTOCOL (1)
string
controllers.main.containers.cloudflared.image.pullPolicy (1)
string
controllers.main.containers.cloudflared.image.repository (1)
string
controllers.main.containers.cloudflared.image.tag (1)
string
controllers.main.containers.cloudflared.probes.liveness.custom (1)
boolean
controllers.main.containers.cloudflared.probes.liveness.enabled (1)
boolean
controllers.main.containers.cloudflared.probes.liveness.spec.failureThreshold (1)
number
controllers.main.containers.cloudflared.probes.liveness.spec.httpGet.path (1)
string
controllers.main.containers.cloudflared.probes.liveness.spec.httpGet.port (1)
number
controllers.main.containers.cloudflared.probes.liveness.spec.initialDelaySeconds (1)
number
controllers.main.containers.cloudflared.probes.liveness.spec.periodSeconds (1)
number
controllers.main.containers.cloudflared.probes.liveness.spec.timeoutSeconds (1)
number
controllers.main.containers.cloudflared.probes.readiness.custom (1)
boolean
controllers.main.containers.cloudflared.probes.readiness.enabled (1)
boolean
controllers.main.containers.cloudflared.probes.readiness.spec.failureThreshold (1)
number
controllers.main.containers.cloudflared.probes.readiness.spec.httpGet.path (1)
string
controllers.main.containers.cloudflared.probes.readiness.spec.httpGet.port (1)
number
controllers.main.containers.cloudflared.probes.readiness.spec.initialDelaySeconds (1)
number
controllers.main.containers.cloudflared.probes.readiness.spec.periodSeconds (1)
number
controllers.main.containers.cloudflared.probes.readiness.spec.timeoutSeconds (1)
number
controllers.main.containers.cloudflared.probes.startup.enabled (1)
boolean
controllers.main.containers.cloudflared.resources.limits.memory (1)
string
controllers.main.containers.cloudflared.resources.requests.cpu (1)
string
controllers.main.containers.cloudflared.resources.requests.memory (1)
string
controllers.main.replicas (2)
number
controllers.main.strategy (2)
string
controllers.main.pod.enableServiceLinks (1)
boolean
controllers.main.pod.securityContext.runAsGroup (1)
number
controllers.main.pod.securityContext.runAsUser (1)
number
controllers.main.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)
string
controllers.main.pod.topologySpreadConstraints[].maxSkew (1)
number
controllers.main.pod.topologySpreadConstraints[].topologyKey (1)
string
controllers.main.pod.topologySpreadConstraints[].whenUnsatisfiable (1)
string
controllers.cloudflare-tunnel.annotations."reloader.stakater.com/auto" (1)
string
controllers.cloudflare-tunnel.containers.cloudflared.args[] (1)
string
controllers.cloudflare-tunnel.containers.cloudflared.env.NO_AUTOUPDATE (1)
string
controllers.cloudflare-tunnel.containers.cloudflared.env.TUNNEL_METRICS (1)
string
controllers.cloudflare-tunnel.containers.cloudflared.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (1)
boolean
controllers.cloudflare-tunnel.containers.cloudflared.env.TUNNEL_POST_QUANTUM (1)
boolean
controllers.cloudflare-tunnel.containers.cloudflared.env.TUNNEL_TRANSPORT_PROTOCOL (1)
string
controllers.cloudflare-tunnel.containers.cloudflared.envFrom[].secretRef.name (1)
string
controllers.cloudflare-tunnel.containers.cloudflared.image.repository (1)
string
controllers.cloudflare-tunnel.containers.cloudflared.image.tag (1)
string
controllers.cloudflare-tunnel.containers.cloudflared.probes.liveness.custom (1)
boolean
controllers.cloudflare-tunnel.containers.cloudflared.probes.liveness.enabled (1)
boolean
controllers.cloudflare-tunnel.containers.cloudflared.probes.liveness.spec.failureThreshold (1)
number
controllers.cloudflare-tunnel.containers.cloudflared.probes.liveness.spec.httpGet.path (1)
string
controllers.cloudflare-tunnel.containers.cloudflared.probes.liveness.spec.httpGet.port (1)
number
controllers.cloudflare-tunnel.containers.cloudflared.probes.liveness.spec.initialDelaySeconds (1)
number
controllers.cloudflare-tunnel.containers.cloudflared.probes.liveness.spec.periodSeconds (1)
number
controllers.cloudflare-tunnel.containers.cloudflared.probes.liveness.spec.timeoutSeconds (1)
number
controllers.cloudflare-tunnel.containers.cloudflared.probes.readiness.custom (1)
boolean
controllers.cloudflare-tunnel.containers.cloudflared.probes.readiness.enabled (1)
boolean
controllers.cloudflare-tunnel.containers.cloudflared.probes.readiness.spec.failureThreshold (1)
number
controllers.cloudflare-tunnel.containers.cloudflared.probes.readiness.spec.httpGet.path (1)
string
controllers.cloudflare-tunnel.containers.cloudflared.probes.readiness.spec.httpGet.port (1)
number
controllers.cloudflare-tunnel.containers.cloudflared.probes.readiness.spec.initialDelaySeconds (1)
number
controllers.cloudflare-tunnel.containers.cloudflared.probes.readiness.spec.periodSeconds (1)
number
controllers.cloudflare-tunnel.containers.cloudflared.probes.readiness.spec.timeoutSeconds (1)
number
controllers.cloudflare-tunnel.containers.cloudflared.resources.limits.memory (1)
string
controllers.cloudflare-tunnel.containers.cloudflared.resources.requests.cpu (1)
string
controllers.cloudflare-tunnel.containers.cloudflared.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.cloudflare-tunnel.containers.cloudflared.securityContext.capabilities.drop[] (1)
string
controllers.cloudflare-tunnel.containers.cloudflared.securityContext.readOnlyRootFilesystem (1)
boolean
controllers.cloudflare-tunnel.replicas (1)
number
controllers.cloudflare-tunnel.strategy (1)
string
service.app.ports.http.port (37)
8080
number
service.app.controller (31)
cloudflared
string
service.cloudflared.ports.http.port (6)
8080
number
service.cloudflared.controller (5)
cloudflared
string
service.main.controller (2)
string
service.main.ports.http.port (2)
number
serviceMonitor.app.endpoints[].port (34)
http
string
serviceMonitor.app.endpoints[].interval (28)
1m
string
serviceMonitor.app.endpoints[].path (28)
/metrics
string
serviceMonitor.app.endpoints[].scheme (28)
http
string
serviceMonitor.app.endpoints[].scrapeTimeout (28)
10s
string
serviceMonitor.app.serviceName (29)
cloudflared
string
serviceMonitor.app.enabled (2)
boolean
serviceMonitor.app.labels.app (1)
string
serviceMonitor.app.labels.release (1)
string
serviceMonitor.cloudflared.endpoints[].port (5)
http
string
serviceMonitor.cloudflared.endpoints[].metricRelabelings[].action (2)
string
serviceMonitor.cloudflared.endpoints[].metricRelabelings[].regex (2)
string
serviceMonitor.cloudflared.endpoints[].interval (1)
string
serviceMonitor.cloudflared.endpoints[].path (1)
string
serviceMonitor.cloudflared.endpoints[].scheme (1)
string
serviceMonitor.cloudflared.endpoints[].scrapeTimeout (1)
string
serviceMonitor.cloudflared.serviceName (5)
cloudflared
string
serviceMonitor.main.endpoints[].interval (2)
string
serviceMonitor.main.endpoints[].path (2)
string
serviceMonitor.main.endpoints[].port (2)
string
serviceMonitor.main.endpoints[].scheme (2)
string
serviceMonitor.main.endpoints[].scrapeTimeout (2)
string
serviceMonitor.main.serviceName (2)
string
serviceMonitor.main.enabled (1)
boolean
defaultPodOptions.securityContext.runAsGroup (31)
65534
number
defaultPodOptions.securityContext.runAsNonRoot (31)
true
boolean
defaultPodOptions.securityContext.runAsUser (31)
65534
number
defaultPodOptions.securityContext.seccompProfile.type (19)
RuntimeDefault
string
defaultPodOptions.securityContext.fsGroup (1)
number
defaultPodOptions.securityContext.fsGroupChangePolicy (1)
string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (7)
cloudflared
string
defaultPodOptions.topologySpreadConstraints[].maxSkew (7)
1
number
defaultPodOptions.topologySpreadConstraints[].topologyKey (7)
kubernetes.io/hostname
string
defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (7)
DoNotSchedule
string
defaultPodOptions.topologySpreadConstraints[].nodeTaintsPolicy (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].key (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].operator (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].values[] (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)
number
defaultPodOptions.hostUsers (1)
boolean
defaultPodOptions.labels.app (1)
string
defaultPodOptions.labels.environment (1)
string
defaultPodOptions.labels.owner (1)
string
defaultPodOptions.priorityClassName (1)
string
defaultPodOptions.terminationGracePeriodSeconds (1)
number
configMaps.config.data."config.yaml" (5)
string
externalSecrets.cloudflared-tunnel.dataFrom[].extract.key (2)
string
externalSecrets.cloudflared-tunnel.forceRename (2)
string
externalSecrets.cloudflared-tunnel.secretStoreRef.kind (2)
string
externalSecrets.cloudflared-tunnel.secretStoreRef.name (2)
string
externalSecrets.cloudflared-tunnel.target.name (2)
string
externalSecrets.cloudflared-tunnel.target.template.data."credentials.json" (2)
string
externalSecrets.cloudflared-tunnel.target.template.data.TunnelID (2)
string
networkpolicies.allow.egress[].toEndpoints[].matchLabels."app.kubernetes.io/name" (2)
string
networkpolicies.allow.egress[].toEndpoints[].matchLabels."io.kubernetes.pod.namespace" (2)
string
networkpolicies.allow.egress[].toEntities[] (2)
string
networkpolicies.allow.egress[].toPorts[].ports[].port (2)
string
networkpolicies.allow.egress[].toPorts[].ports[].protocol (2)
string
networkpolicies.allow.enableDefaultDeny.egress (2)
boolean
networkpolicies.allow.enableDefaultDeny.ingress (2)
boolean
networkpolicies.allow.endpointSelector.matchLabels."app.kubernetes.io/name" (2)
string
networkpolicies.allow.forceRename (2)
string
networkpolicies.allow.type (2)
string
networkpolicies.main.controller (1)
string
networkpolicies.main.policyTypes[] (1)
string
networkpolicies.main.rules.egress[].ports[].port (1)
number
networkpolicies.main.rules.egress[].ports[].protocol (1)
string
networkpolicies.main.rules.egress[].to[].ipBlock.cidr (1)
string
networkpolicies.main.rules.egress[].to[].ipBlock.except[] (1)
string
networkpolicies.main.rules.egress[].to[].namespaceSelector.matchLabels."kubernetes.io/metadata.name" (1)
string
networkpolicies.main.rules.egress[].to[].podSelector.matchLabels."gateway.envoyproxy.io/owning-gateway-name" (1)
string
networkpolicies.main.rules.egress[].to[].podSelector.matchLabels.k8s-app (1)
string