cloudflare-tunnel helm release

cloudflare-tunnel helm

No introduction found. Create it?

Install

Install with:

helm repo add cloudflare-tunnel oci://ghcr.io/bjw-s-labs/charts/
helm install cloudflare-tunnel cloudflare-tunnel/cloudflare-tunnel -f values.yaml

Examples

See examples from other people.

Major version:

Filter repos who also have:

Top Repositories (5 out of 47)

Name	Repo	Stars	Version	Timestamp
cloudflare-tunnel	coolguy1771/home-ops	77	5.1.0	2 days ago
cloudflare-tunnel	auricom/home-ops	207	5.1.0	3 days ago
cloudflare-tunnel	chr1sd/home-ops	184	5.1.0	3 days ago
cloudflare-tunnel	haraldkoch/kochhaus-home	178	5.1.0	4 days ago
cloudflare-tunnel	onedr0p/home-ops	2870	5.1.0	4 days ago

Name

Repo

Stars

Version

Timestamp

cloudflare-tunnel

coolguy1771/home-ops

5.1.0

2 days ago

cloudflare-tunnel

auricom/home-ops

207

5.1.0

3 days ago

cloudflare-tunnel

chr1sd/home-ops

184

5.1.0

3 days ago

cloudflare-tunnel

haraldkoch/kochhaus-home

178

5.1.0

4 days ago

cloudflare-tunnel

onedr0p/home-ops

2870

5.1.0

4 days ago

Values

See the most popular values for this chart:

Key	Types
controllers.cloudflare-tunnel.annotations."reloader.stakater.com/auto" (47) `true`	string
controllers.cloudflare-tunnel.strategy (47) `RollingUpdate`	string
controllers.cloudflare-tunnel.containers.app.args[] (46) `- tunnel - run`	string
controllers.cloudflare-tunnel.containers.app.env.NO_AUTOUPDATE (46) `true`	boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_METRICS (46) `0.0.0.0:8080`	string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_TRANSPORT_PROTOCOL (32) `quic`	string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_POST_QUANTUM (30) `true`	boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (6) `true`	boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_CRED_FILE (1)	string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_EDGE_IP_VERSION (1)	number
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.key (1)	string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.name (1)	string
controllers.cloudflare-tunnel.containers.app.image.repository (46) `docker.io/cloudflare/cloudflared`	string
controllers.cloudflare-tunnel.containers.app.image.tag (46) `2026.8.3@sha256:51c9cefcb4569df44e1ad403ab1d3d8065aa8e84339bcfc6aee75502e1140339`	string
controllers.cloudflare-tunnel.containers.app.probes.liveness.custom (46) `true`	boolean
controllers.cloudflare-tunnel.containers.app.probes.liveness.enabled (46) `true`	boolean
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.failureThreshold (46) `3`	number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.path (46) `/ready`	string
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.port (46) `8080`	number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.initialDelaySeconds (46) `0`	number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.periodSeconds (46) `10`	number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.timeoutSeconds (46) `1`	number
controllers.cloudflare-tunnel.containers.app.probes.readiness.custom (46) `true`	boolean
controllers.cloudflare-tunnel.containers.app.probes.readiness.enabled (46) `true`	boolean
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.failureThreshold (46) `3`	number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.path (46) `/ready`	string
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.port (46) `8080`	number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.initialDelaySeconds (46) `0`	number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.periodSeconds (46) `10`	number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.timeoutSeconds (46) `1`	number
controllers.cloudflare-tunnel.containers.app.resources.limits.memory (46) `256Mi`	string
controllers.cloudflare-tunnel.containers.app.resources.requests.cpu (46) `10m`	string
controllers.cloudflare-tunnel.containers.app.resources.requests.memory (5)	string
controllers.cloudflare-tunnel.containers.app.securityContext.allowPrivilegeEscalation (46) `false`	boolean
controllers.cloudflare-tunnel.containers.app.securityContext.capabilities.drop[] (46) `- ALL`	string
controllers.cloudflare-tunnel.containers.app.securityContext.readOnlyRootFilesystem (46) `true`	boolean
controllers.cloudflare-tunnel.containers.app.envFrom[].secretRef.name (45) `cloudflare-tunnel-secret`	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.args[] (1)	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.NO_AUTOUPDATE (1)	boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.TUNNEL_METRICS (1)	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.envFrom[].secretRef.name (1)	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.image.repository (1)	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.image.tag (1)	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.custom (1)	boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.enabled (1)	boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.failureThreshold (1)	number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.httpGet.path (1)	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.httpGet.port (1)	number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.initialDelaySeconds (1)	number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.periodSeconds (1)	number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.timeoutSeconds (1)	number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.custom (1)	boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.enabled (1)	boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.failureThreshold (1)	number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.httpGet.path (1)	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.httpGet.port (1)	number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.initialDelaySeconds (1)	number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.periodSeconds (1)	number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.timeoutSeconds (1)	number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.resources.limits.memory (1)	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.resources.requests.cpu (1)	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.allowPrivilegeEscalation (1)	boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.capabilities.drop[] (1)	string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.readOnlyRootFilesystem (1)	boolean
controllers.cloudflare-tunnel.replicas (30) `2`	number, string
defaultPodOptions.securityContext.runAsGroup (47) `65534`	number
defaultPodOptions.securityContext.runAsNonRoot (47) `true`	boolean
defaultPodOptions.securityContext.runAsUser (47) `1000`	number
defaultPodOptions.securityContext.fsGroup (1)	number
defaultPodOptions.securityContext.fsGroupChangePolicy (1)	string
defaultPodOptions.securityContext.seccompProfile.type (1)	string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (4) `cloudflare-tunnel`	string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/controller" (1)	string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)	string
defaultPodOptions.topologySpreadConstraints[].maxSkew (4) `1`	number
defaultPodOptions.topologySpreadConstraints[].topologyKey (4) `kubernetes.io/hostname`	string
defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (4) `DoNotSchedule`	string
defaultPodOptions.topologySpreadConstraints[].nodeTaintsPolicy (1)	string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].key (1)	string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].operator (1)	string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].values[] (1)	string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)	number
defaultPodOptions.labels."network.home.arpa/to-envoy-external" (1)	string
defaultPodOptions.labels."platform.home.arpa/tier" (1)	string
defaultPodOptions.tolerations[].effect (1)	string
defaultPodOptions.tolerations[].key (1)	string
defaultPodOptions.tolerations[].operator (1)	string
defaultPodOptions.tolerations[].value (1)	string
service.app.ports.http.port (46) `8080`	number
service.cloudflare-tunnel.controller (1)	string
service.cloudflare-tunnel.ports.http.port (1)	number
serviceMonitor.app.endpoints[].port (46) `http`	string
serviceMonitor.app.endpoints[].interval (1)	string
serviceMonitor.app.endpoints[].path (1)	string
serviceMonitor.app.endpoints[].scheme (1)	string
serviceMonitor.app.endpoints[].scrapeTimeout (1)	string
serviceMonitor.cloudflare-tunnel.endpoints[].port (1)	string
serviceMonitor.cloudflare-tunnel.serviceName (1)	string
persistence.config-file.globalMounts[].path (45) `/etc/cloudflared/config.yaml`	string
persistence.config-file.globalMounts[].subPath (45) `config.yaml`	string
persistence.config-file.globalMounts[].readOnly (6) `true`	boolean
persistence.config-file.type (45) `configMap`	string
persistence.config-file.identifier (40) `config`	string
persistence.config-file.name (5) `cloudflare-tunnel-configmap`	string
persistence.config.globalMounts[].path (2)	string
persistence.config.globalMounts[].subPath (2)	string
persistence.config.globalMounts[].readOnly (1)	boolean
persistence.config.type (2)	string
persistence.config.enabled (1)	boolean
persistence.config.identifier (1)	string
persistence.config.name (1)	string
persistence.creds.globalMounts[].path (1)	string
persistence.creds.globalMounts[].readOnly (1)	boolean
persistence.creds.globalMounts[].subPath (1)	string
persistence.creds.name (1)	string
persistence.creds.type (1)	string
configMaps.config.data."config.yaml" (41) `ingress: - hostname: "*.${SECRET_DOMAIN}" originRequest: http2Origin: true originServerName: external.${SECRET_DOMAIN} service: https://envoy-external.{{ .Release.Namespace }}.svc.cluster.local:443 - service: http_status:404`	string
podDisruptionBudget.cloudflare-tunnel.controller (1)	string
podDisruptionBudget.cloudflare-tunnel.minAvailable (1)	number

Key

Types

controllers.cloudflare-tunnel.annotations."reloader.stakater.com/auto" (47)

true

string

controllers.cloudflare-tunnel.strategy (47)

RollingUpdate

string

controllers.cloudflare-tunnel.containers.app.args[] (46)

- tunnel
- run

string

controllers.cloudflare-tunnel.containers.app.env.NO_AUTOUPDATE (46)

true

boolean

controllers.cloudflare-tunnel.containers.app.env.TUNNEL_METRICS (46)

0.0.0.0:8080

string

controllers.cloudflare-tunnel.containers.app.env.TUNNEL_TRANSPORT_PROTOCOL (32)

quic

string

controllers.cloudflare-tunnel.containers.app.env.TUNNEL_POST_QUANTUM (30)

true

boolean

controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (6)

true

boolean

controllers.cloudflare-tunnel.containers.app.env.TUNNEL_CRED_FILE (1)

string

controllers.cloudflare-tunnel.containers.app.env.TUNNEL_EDGE_IP_VERSION (1)

number

controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.key (1)

string

controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.name (1)

string

controllers.cloudflare-tunnel.containers.app.image.repository (46)

docker.io/cloudflare/cloudflared

string

controllers.cloudflare-tunnel.containers.app.image.tag (46)

2026.8.3@sha256:51c9cefcb4569df44e1ad403ab1d3d8065aa8e84339bcfc6aee75502e1140339

string

controllers.cloudflare-tunnel.containers.app.probes.liveness.custom (46)

true

boolean

controllers.cloudflare-tunnel.containers.app.probes.liveness.enabled (46)

true

boolean

controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.failureThreshold (46)

number

controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.path (46)

/ready

string

controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.port (46)

number

controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.initialDelaySeconds (46)

number

controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.periodSeconds (46)

number

controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.timeoutSeconds (46)

number

controllers.cloudflare-tunnel.containers.app.probes.readiness.custom (46)

true

boolean

controllers.cloudflare-tunnel.containers.app.probes.readiness.enabled (46)

true

boolean

controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.failureThreshold (46)

number

controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.path (46)

/ready

string

controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.port (46)

number

controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.initialDelaySeconds (46)

number

controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.periodSeconds (46)

number

controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.timeoutSeconds (46)

number

controllers.cloudflare-tunnel.containers.app.resources.limits.memory (46)

256Mi

string

controllers.cloudflare-tunnel.containers.app.resources.requests.cpu (46)

10m

string

controllers.cloudflare-tunnel.containers.app.resources.requests.memory (5)

string

controllers.cloudflare-tunnel.containers.app.securityContext.allowPrivilegeEscalation (46)

false

boolean

controllers.cloudflare-tunnel.containers.app.securityContext.capabilities.drop[] (46)

- ALL

string

controllers.cloudflare-tunnel.containers.app.securityContext.readOnlyRootFilesystem (46)

true

boolean

controllers.cloudflare-tunnel.containers.app.envFrom[].secretRef.name (45)

cloudflare-tunnel-secret

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.args[] (1)

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.NO_AUTOUPDATE (1)

boolean

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.TUNNEL_METRICS (1)

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.envFrom[].secretRef.name (1)

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.image.repository (1)

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.image.tag (1)

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.custom (1)

boolean

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.enabled (1)

boolean

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.failureThreshold (1)

number

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.httpGet.path (1)

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.httpGet.port (1)

number

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.initialDelaySeconds (1)

number

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.periodSeconds (1)

number

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.timeoutSeconds (1)

number

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.custom (1)

boolean

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.enabled (1)

boolean

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.failureThreshold (1)

number

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.httpGet.path (1)

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.httpGet.port (1)

number

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.initialDelaySeconds (1)

number

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.periodSeconds (1)

number

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.timeoutSeconds (1)

number

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.resources.limits.memory (1)

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.resources.requests.cpu (1)

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.allowPrivilegeEscalation (1)

boolean

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.capabilities.drop[] (1)

string

controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.readOnlyRootFilesystem (1)

boolean

controllers.cloudflare-tunnel.replicas (30)

number, string

defaultPodOptions.securityContext.runAsGroup (47)

number

defaultPodOptions.securityContext.runAsNonRoot (47)

true

boolean

defaultPodOptions.securityContext.runAsUser (47)

number

defaultPodOptions.securityContext.fsGroup (1)

number

defaultPodOptions.securityContext.fsGroupChangePolicy (1)

string

defaultPodOptions.securityContext.seccompProfile.type (1)

string

defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (4)

cloudflare-tunnel

string

defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/controller" (1)

string

defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)

string

defaultPodOptions.topologySpreadConstraints[].maxSkew (4)

number

defaultPodOptions.topologySpreadConstraints[].topologyKey (4)

kubernetes.io/hostname

string

defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (4)

DoNotSchedule

string

defaultPodOptions.topologySpreadConstraints[].nodeTaintsPolicy (1)

string

defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].key (1)

string

defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].operator (1)

string

defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].values[] (1)

string

defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)

number

defaultPodOptions.labels."network.home.arpa/to-envoy-external" (1)

string

defaultPodOptions.labels."platform.home.arpa/tier" (1)

string

defaultPodOptions.tolerations[].effect (1)

string

defaultPodOptions.tolerations[].key (1)

string

defaultPodOptions.tolerations[].operator (1)

string

defaultPodOptions.tolerations[].value (1)

string

service.app.ports.http.port (46)

number

service.cloudflare-tunnel.controller (1)

string

service.cloudflare-tunnel.ports.http.port (1)

number

serviceMonitor.app.endpoints[].port (46)

http

string

serviceMonitor.app.endpoints[].interval (1)

string

serviceMonitor.app.endpoints[].path (1)

string

serviceMonitor.app.endpoints[].scheme (1)

string

serviceMonitor.app.endpoints[].scrapeTimeout (1)

string

serviceMonitor.cloudflare-tunnel.endpoints[].port (1)

string

serviceMonitor.cloudflare-tunnel.serviceName (1)

string

persistence.config-file.globalMounts[].path (45)

/etc/cloudflared/config.yaml

string

persistence.config-file.globalMounts[].subPath (45)

config.yaml

string

persistence.config-file.globalMounts[].readOnly (6)

true

boolean

persistence.config-file.type (45)

configMap

string

persistence.config-file.identifier (40)

config

string

persistence.config-file.name (5)

cloudflare-tunnel-configmap

string

persistence.config.globalMounts[].path (2)

string

persistence.config.globalMounts[].subPath (2)

string

persistence.config.globalMounts[].readOnly (1)

boolean

persistence.config.type (2)

string

persistence.config.enabled (1)

boolean

persistence.config.identifier (1)

string

persistence.config.name (1)

string

persistence.creds.globalMounts[].path (1)

string

persistence.creds.globalMounts[].readOnly (1)

boolean

persistence.creds.globalMounts[].subPath (1)

string

persistence.creds.name (1)

string

persistence.creds.type (1)

string

configMaps.config.data."config.yaml" (41)

ingress:
  - hostname: "*.${SECRET_DOMAIN}"
    originRequest:
      http2Origin: true
      originServerName: external.${SECRET_DOMAIN}
    service: https://envoy-external.{{ .Release.Namespace }}.svc.cluster.local:443
  - service: http_status:404

string

podDisruptionBudget.cloudflare-tunnel.controller (1)

string

podDisruptionBudget.cloudflare-tunnel.minAvailable (1)

number