cloudflared helm

Cloudflared is a lightweight proxy client for securely connecting applications to Cloudflare’s network. It powers Cloudflare Tunnel, allowing services to be exposed without opening ports or configuring firewall rules. cloudflared routes traffic through Cloudflare’s global network, enhancing security with DDoS protection, authentication, and encrypted connections. It supports HTTP, TCP, and QUIC, making it ideal for self-hosted services, remote access, and zero-trust networking.

Install

Install with:

helm repo add app-template oci://ghcr.io/bjw-s-labs/charts/
helm install cloudflared app-template/app-template -f values.yaml

Examples

See examples from other people.

Top Repositories (5 out of 82)

NameRepoStarsVersionTimestamp
cloudflaredszinn/k8s-homelab2884.6.211 days ago
cloudflaredPumba98/flux2-gitops694.6.221 days ago
cloudflaredjfroy/flatops364.6.222 days ago
cloudflaredburoa/k8s-gitops3594.6.223 days ago
cloudflareddrag0n141/home-ops524.6.223 days ago

Values

See the most popular values for this chart:

KeyTypes
string
persistence.config.name (71)
cloudflared-configmap
string
persistence.config.globalMounts[].path (70)
/etc/cloudflared/config/config.yaml
string
string
boolean
boolean
persistence.config.mountPath (3)
/etc/cloudflared/config/config.yaml
string
boolean
string
string
persistence.creds.name (60)
cloudflared-secret
string
string
persistence.creds.globalMounts[].path (57)
/etc/cloudflared/creds/credentials.json
string
boolean
string
boolean
persistence.creds.mountPath (3)
/etc/cloudflared/creds/credentials.json
string
boolean
string
string
string
boolean
string
string
string
string
boolean
string
string
string
string
boolean
string
string
string
string
controllers.cloudflared.containers.app.args[] (68)
- tunnel
- --config
- /etc/cloudflared/config/config.yaml
- run
- $(TUNNEL_ID)
string
string
boolean, string
string
boolean
string
boolean
string
string
string
string, number
boolean, string
string
boolean
string
string
boolean
boolean
number
string
number
number
number
number
boolean
boolean
number
string
number
number
number
number
boolean
boolean
number
string
number
number
number
number
string
string
string
string
boolean
string
string
boolean
string
string
controllers.cloudflared.containers.cloudflared.args[] (4)
- tunnel
- --config
- /etc/cloudflared/config/config.yaml
- run
- $(TUNNEL_ID)
string
boolean
string
string
string
string
string
boolean
boolean
string
string
string
string
boolean
boolean
string
number
number
number
number
number
boolean
boolean
string
number
number
number
number
number
boolean
boolean
number
string
number
number
boolean
string
boolean
string
string
string
string
string
string
string
number
number
number
boolean
number
string
string
number
string
string
string
string
boolean
string
boolean
number
string
controllers.main.containers.main.args[] (5)
- tunnel
- --config
- /etc/cloudflared/config/config.yaml
- run
- $(TUNNEL_ID)
string
string, boolean
controllers.main.containers.main.env.TUNNEL_CRED_FILE (5)
/etc/cloudflared/creds/credentials.json
string
string
boolean
string
string
string
boolean
string
controllers.main.containers.main.image.tag (5)
2026.2.0@sha256:404528c1cd63c3eb882c257ae524919e4376115e6fe57befca8d603656a91a4c
string
string
boolean
number
string
number
number
number
number
boolean
boolean
number
string
number
number
number
number
boolean
boolean
string
string
string
boolean
string
boolean
string
string
string
string
string
string
string
string
string
string
boolean
boolean
number
string
number
number
number
number
boolean
boolean
number
string
number
number
number
number
boolean
string
string
string
number
string
number
number
boolean
string
number
string
string
boolean
string
string
string
string
boolean
boolean
string
string
string
string
boolean
boolean
number
string
number
number
number
number
boolean
boolean
number
string
number
number
number
number
string
string
boolean
string
boolean
number
string
number
string
string
number
string
string
number
string
string
string
string
string
string
boolean
string
string
string
string
string
string
string
boolean
string
string
string
string
string
string
string
string
string
number
boolean
number
string
number
string
string
number
string
string
boolean
boolean
string
string
string
string
string
string
string
configMaps.config.data."config.yaml" (10)
ingress: - hostname: "*.${SECRET_DOMAIN}" originRequest: http2Origin: true originServerName: external.${SECRET_DOMAIN} service: https://envoy-external.{{ .Release.Namespace }}.svc.cluster.local:443 - service: http_status:404
string
args[] (3)
- tunnel
- --config
- /etc/cloudflared/config/config.yaml
- run
- $(TUNNEL_ID)
string
string
number
string
string
env.TUNNEL_CRED_FILE (3)
/etc/cloudflared/creds/credentials.json
string
string
string
string
string
image.repository (3)
docker.io/cloudflare/cloudflared
string
string
boolean
boolean
number
string
string
number
number
number
boolean
boolean
number
string
string
number
number
number
boolean
boolean
number
string
string
number
string
string
string
string
string
number
string
string
string
string
string
string
string
number
string
string