cloudflare-tunnel helm release

cloudflare-tunnel helm

No introduction found. Create it?

Install

Install with:

helm repo add cloudflare-tunnel oci://ghcr.io/bjw-s-labs/charts/
helm install cloudflare-tunnel cloudflare-tunnel/cloudflare-tunnel -f values.yaml

Examples

See examples from other people.

Major version:

Filter repos who also have:

Top Repositories (5 out of 46)

Name	Repo	Stars	Version	Timestamp
cloudflare-tunnel	chr1sd/home-ops	174	5.0.1	3 hours ago
cloudflare-tunnel	kashalls/home-cluster	105	5.0.1	3 hours ago
cloudflare-tunnel	waifulabs/infrastructure	222	5.0.1	3 hours ago
cloudflare-tunnel	onedr0p/home-ops	2863	5.0.1	7 hours ago
cloudflare-tunnel	haraldkoch/kochhaus-home	178	5.0.1	12 hours ago

Name

Repo

Stars

Version

Timestamp

cloudflare-tunnel

chr1sd/home-ops

174

5.0.1

3 hours ago

cloudflare-tunnel

kashalls/home-cluster

105

5.0.1

3 hours ago

cloudflare-tunnel

waifulabs/infrastructure

222

5.0.1

3 hours ago

cloudflare-tunnel

onedr0p/home-ops

2863

5.0.1

7 hours ago

cloudflare-tunnel

haraldkoch/kochhaus-home

178

5.0.1

12 hours ago

Values

See the most popular values for this chart:

Key	Types
controllers.cloudflare-tunnel.annotations."reloader.stakater.com/auto" (46) `true`	string
controllers.cloudflare-tunnel.strategy (46) `RollingUpdate`	string
controllers.cloudflare-tunnel.containers.app.args[] (45) `- tunnel - run`	string
controllers.cloudflare-tunnel.containers.app.env.NO_AUTOUPDATE (45) `true`	boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_METRICS (45) `0.0.0.0:8080`	string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_TRANSPORT_PROTOCOL (31) `quic`	string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_POST_QUANTUM (29) `true`	boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (6) `true`	boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_CRED_FILE (1)	string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_EDGE_IP_VERSION (1)	number
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.key (1)	string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.name (1)	string
controllers.cloudflare-tunnel.containers.app.image.repository (45) `docker.io/cloudflare/cloudflared`	string
controllers.cloudflare-tunnel.containers.app.image.tag (45) `2026.8.1@sha256:d9ff527dc19799e24d3689058161fb01e752a24be1823577bae54c9c2489275f`	string
controllers.cloudflare-tunnel.containers.app.probes.liveness.custom (45) `true`	boolean
controllers.cloudflare-tunnel.containers.app.probes.liveness.enabled (45) `true`	boolean
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.failureThreshold (45) `3`	number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.path (45) `/ready`	string
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.port (45) `8080`	number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.initialDelaySeconds (45) `0`	number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.periodSeconds (45) `10`	number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.timeoutSeconds (45) `1`	number
controllers.cloudflare-tunnel.containers.app.probes.readiness.custom (45) `true`	boolean
controllers.cloudflare-tunnel.containers.app.probes.readiness.enabled (45) `true`	boolean
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.failureThreshold (45) `3`	number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.path (45) `/ready`	string
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.port (45) `8080`	number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.initialDelaySeconds (45) `0`	number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.periodSeconds (45) `10`	number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.timeoutSeconds (45) `1`	number
controllers.cloudflare-tunnel.containers.app.resources.limits.memory (45) `256Mi`	string
controllers.cloudflare-tunnel.containers.app.resources.requests.cpu (45) `10m`	string
controllers.cloudflare-tunnel.containers.app.resources.requests.memory (5)	string
controllers.cloudflare-tunnel.containers.app.securityContext.allowPrivilegeEscalation (45) `false`	boolean
controllers.cloudflare-tunnel.containers.app.securityContext.capabilities.drop[] (45) `- ALL`	string
controllers.cloudflare-tunnel.containers.app.securityContext.readOnlyRootFilesystem (45) `true`	boolean
controllers.cloudflare-tunnel.containers.app.envFrom[].secretRef.name (44) `cloudflare-tunnel-secret`	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.args[] (1)	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.NO_AUTOUPDATE (1)	boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.TUNNEL_METRICS (1)	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.envFrom[].secretRef.name (1)	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.image.repository (1)	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.image.tag (1)	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.custom (1)	boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.enabled (1)	boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.failureThreshold (1)	number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.httpGet.path (1)	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.httpGet.port (1)	number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.initialDelaySeconds (1)	number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.periodSeconds (1)	number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.timeoutSeconds (1)	number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.custom (1)	boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.enabled (1)	boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.failureThreshold (1)	number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.httpGet.path (1)	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.httpGet.port (1)	number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.initialDelaySeconds (1)	number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.periodSeconds (1)	number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.timeoutSeconds (1)	number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.resources.limits.memory (1)	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.resources.requests.cpu (1)	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.allowPrivilegeEscalation (1)	boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.capabilities.drop[] (1)	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.readOnlyRootFilesystem (1)	boolean
controllers.cloudflare-tunnel.replicas (29) `2`	number, string
defaultPodOptions.securityContext.runAsGroup (46) `1000`	number
defaultPodOptions.securityContext.runAsNonRoot (46) `true`	boolean
defaultPodOptions.securityContext.runAsUser (46) `1000`	number
defaultPodOptions.securityContext.seccompProfile.type (2)	string
defaultPodOptions.securityContext.fsGroup (1)	number
defaultPodOptions.securityContext.fsGroupChangePolicy (1)	string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (3) `cloudflare-tunnel`	string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/controller" (1)	string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)	string
defaultPodOptions.topologySpreadConstraints[].maxSkew (3) `1`	number
defaultPodOptions.topologySpreadConstraints[].topologyKey (3) `kubernetes.io/hostname`	string
defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (3)	string
defaultPodOptions.topologySpreadConstraints[].nodeTaintsPolicy (1)	string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].key (1)	string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].operator (1)	string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].values[] (1)	string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)	number
defaultPodOptions.labels."network.home.arpa/to-envoy-external" (1)	string
defaultPodOptions.labels."platform.home.arpa/tier" (1)	string
defaultPodOptions.tolerations[].effect (1)	string
defaultPodOptions.tolerations[].key (1)	string
defaultPodOptions.tolerations[].operator (1)	string
defaultPodOptions.tolerations[].value (1)	string
service.app.ports.http.port (45) `8080`	number
service.app.controller (1)	string
service.cloudflare-tunnel.controller (1)	string
service.cloudflare-tunnel.ports.http.port (1)	number
serviceMonitor.app.endpoints[].port (45) `http`	string
serviceMonitor.app.endpoints[].interval (1)	string
serviceMonitor.app.endpoints[].path (1)	string
serviceMonitor.app.endpoints[].scheme (1)	string
serviceMonitor.app.endpoints[].scrapeTimeout (1)	string
serviceMonitor.cloudflare-tunnel.endpoints[].port (1)	string
serviceMonitor.cloudflare-tunnel.serviceName (1)	string
persistence.config-file.globalMounts[].path (44) `/etc/cloudflared/config.yaml`	string
persistence.config-file.globalMounts[].subPath (44) `config.yaml`	string
persistence.config-file.globalMounts[].readOnly (6) `true`	boolean
persistence.config-file.type (44) `configMap`	string
persistence.config-file.identifier (39) `config`	string
persistence.config-file.name (5) `cloudflare-tunnel-configmap`	string
persistence.config.globalMounts[].path (2)	string
persistence.config.globalMounts[].subPath (2)	string
persistence.config.globalMounts[].readOnly (1)	boolean
persistence.config.type (2)	string
persistence.config.enabled (1)	boolean
persistence.config.identifier (1)	string
persistence.config.name (1)	string
persistence.creds.globalMounts[].path (1)	string
persistence.creds.globalMounts[].readOnly (1)	boolean
persistence.creds.globalMounts[].subPath (1)	string
persistence.creds.name (1)	string
persistence.creds.type (1)	string
configMaps.config.data."config.yaml" (40) `ingress: - hostname: "*.${SECRET_DOMAIN}" originRequest: http2Origin: true originServerName: external.${SECRET_DOMAIN} service: https://envoy-external.{{ .Release.Namespace }}.svc.cluster.local:443 - service: http_status:404`	string
podDisruptionBudget.cloudflare-tunnel.controller (1)	string
podDisruptionBudget.cloudflare-tunnel.minAvailable (1)	number

Key

Types

controllers.cloudflare-tunnel.annotations."reloader.stakater.com/auto" (46)

true

string

controllers.cloudflare-tunnel.strategy (46)

RollingUpdate

string

controllers.cloudflare-tunnel.containers.app.args[] (45)

- tunnel
- run

string

controllers.cloudflare-tunnel.containers.app.env.NO_AUTOUPDATE (45)

true

boolean

controllers.cloudflare-tunnel.containers.app.env.TUNNEL_METRICS (45)

0.0.0.0:8080

string

controllers.cloudflare-tunnel.containers.app.env.TUNNEL_TRANSPORT_PROTOCOL (31)

quic

string

controllers.cloudflare-tunnel.containers.app.env.TUNNEL_POST_QUANTUM (29)

true

boolean

controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (6)

true

boolean

controllers.cloudflare-tunnel.containers.app.env.TUNNEL_CRED_FILE (1)

string

controllers.cloudflare-tunnel.containers.app.env.TUNNEL_EDGE_IP_VERSION (1)

number

controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.key (1)

string

controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.name (1)

string

controllers.cloudflare-tunnel.containers.app.image.repository (45)

docker.io/cloudflare/cloudflared

string

controllers.cloudflare-tunnel.containers.app.image.tag (45)

2026.8.1@sha256:d9ff527dc19799e24d3689058161fb01e752a24be1823577bae54c9c2489275f

string

controllers.cloudflare-tunnel.containers.app.probes.liveness.custom (45)

true

boolean

controllers.cloudflare-tunnel.containers.app.probes.liveness.enabled (45)

true

boolean

controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.failureThreshold (45)

number

controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.path (45)

/ready

string

controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.port (45)

number

controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.initialDelaySeconds (45)

number

controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.periodSeconds (45)

number

controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.timeoutSeconds (45)

number

controllers.cloudflare-tunnel.containers.app.probes.readiness.custom (45)

true

boolean

controllers.cloudflare-tunnel.containers.app.probes.readiness.enabled (45)

true

boolean

controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.failureThreshold (45)

number

controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.path (45)

/ready

string

controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.port (45)

number

controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.initialDelaySeconds (45)

number

controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.periodSeconds (45)

number

controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.timeoutSeconds (45)

number

controllers.cloudflare-tunnel.containers.app.resources.limits.memory (45)

256Mi

string

controllers.cloudflare-tunnel.containers.app.resources.requests.cpu (45)

10m

string

controllers.cloudflare-tunnel.containers.app.resources.requests.memory (5)

string

controllers.cloudflare-tunnel.containers.app.securityContext.allowPrivilegeEscalation (45)

false

boolean

controllers.cloudflare-tunnel.containers.app.securityContext.capabilities.drop[] (45)

- ALL

string

controllers.cloudflare-tunnel.containers.app.securityContext.readOnlyRootFilesystem (45)

true

boolean

controllers.cloudflare-tunnel.containers.app.envFrom[].secretRef.name (44)

cloudflare-tunnel-secret

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.args[] (1)

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.NO_AUTOUPDATE (1)

boolean

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.TUNNEL_METRICS (1)

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.envFrom[].secretRef.name (1)

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.image.repository (1)

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.image.tag (1)

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.custom (1)

boolean

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.enabled (1)

boolean

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.failureThreshold (1)

number

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.httpGet.path (1)

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.httpGet.port (1)

number

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.initialDelaySeconds (1)

number

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.periodSeconds (1)

number

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.timeoutSeconds (1)

number

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.custom (1)

boolean

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.enabled (1)

boolean

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.failureThreshold (1)

number

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.httpGet.path (1)

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.httpGet.port (1)

number

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.initialDelaySeconds (1)

number

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.periodSeconds (1)

number

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.timeoutSeconds (1)

number

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.resources.limits.memory (1)

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.resources.requests.cpu (1)

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.allowPrivilegeEscalation (1)

boolean

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.capabilities.drop[] (1)

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.readOnlyRootFilesystem (1)

boolean

controllers.cloudflare-tunnel.replicas (29)

number, string

defaultPodOptions.securityContext.runAsGroup (46)

number

defaultPodOptions.securityContext.runAsNonRoot (46)

true

boolean

defaultPodOptions.securityContext.runAsUser (46)

number

defaultPodOptions.securityContext.seccompProfile.type (2)

string

defaultPodOptions.securityContext.fsGroup (1)

number

defaultPodOptions.securityContext.fsGroupChangePolicy (1)

string

defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (3)

cloudflare-tunnel

string

defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/controller" (1)

string

defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)

string

defaultPodOptions.topologySpreadConstraints[].maxSkew (3)

number

defaultPodOptions.topologySpreadConstraints[].topologyKey (3)

kubernetes.io/hostname

string

defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (3)

string

defaultPodOptions.topologySpreadConstraints[].nodeTaintsPolicy (1)

string

defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].key (1)

string

defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].operator (1)

string

defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].values[] (1)

string

defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)

number

defaultPodOptions.labels."network.home.arpa/to-envoy-external" (1)

string

defaultPodOptions.labels."platform.home.arpa/tier" (1)

string

defaultPodOptions.tolerations[].effect (1)

string

defaultPodOptions.tolerations[].key (1)

string

defaultPodOptions.tolerations[].operator (1)

string

defaultPodOptions.tolerations[].value (1)

string

service.app.ports.http.port (45)

number

service.app.controller (1)

string

service.cloudflare-tunnel.controller (1)

string

service.cloudflare-tunnel.ports.http.port (1)

number

serviceMonitor.app.endpoints[].port (45)

http

string

serviceMonitor.app.endpoints[].interval (1)

string

serviceMonitor.app.endpoints[].path (1)

string

serviceMonitor.app.endpoints[].scheme (1)

string

serviceMonitor.app.endpoints[].scrapeTimeout (1)

string

serviceMonitor.cloudflare-tunnel.endpoints[].port (1)

string

serviceMonitor.cloudflare-tunnel.serviceName (1)

string

persistence.config-file.globalMounts[].path (44)

/etc/cloudflared/config.yaml

string

persistence.config-file.globalMounts[].subPath (44)

config.yaml

string

persistence.config-file.globalMounts[].readOnly (6)

true

boolean

persistence.config-file.type (44)

configMap

string

persistence.config-file.identifier (39)

config

string

persistence.config-file.name (5)

cloudflare-tunnel-configmap

string

persistence.config.globalMounts[].path (2)

string

persistence.config.globalMounts[].subPath (2)

string

persistence.config.globalMounts[].readOnly (1)

boolean

persistence.config.type (2)

string

persistence.config.enabled (1)

boolean

persistence.config.identifier (1)

string

persistence.config.name (1)

string

persistence.creds.globalMounts[].path (1)

string

persistence.creds.globalMounts[].readOnly (1)

boolean

persistence.creds.globalMounts[].subPath (1)

string

persistence.creds.name (1)

string

persistence.creds.type (1)

string

configMaps.config.data."config.yaml" (40)

ingress:
  - hostname: "*.${SECRET_DOMAIN}"
    originRequest:
      http2Origin: true
      originServerName: external.${SECRET_DOMAIN}
    service: https://envoy-external.{{ .Release.Namespace }}.svc.cluster.local:443
  - service: http_status:404

string

podDisruptionBudget.cloudflare-tunnel.controller (1)

string

podDisruptionBudget.cloudflare-tunnel.minAvailable (1)

number