Cloudflared is a lightweight proxy client for securely connecting applications to Cloudflare’s network. It powers Cloudflare Tunnel, allowing services to be exposed without opening ports or configuring firewall rules. cloudflared routes traffic through Cloudflare’s global network, enhancing security with DDoS protection, authentication, and encrypted connections. It supports HTTP, TCP, and QUIC, making it ideal for self-hosted services, remote access, and zero-trust networking.
cloudflared from bjw-s-labs/charts is more popular with 56 repositories.
Install with:
helm repo add cloudflared oci://ghcr.io/bjw-s-labs/charts/
helm install cloudflared cloudflared/cloudflared -f values.yamlSee examples from other people.
| Name | Repo | Stars | Version | Timestamp |
|---|---|---|---|---|
| cloudflared | Mafyuh/iac | 809 | 5.0.1 | 5 hours ago |
| cloudflared | Mafyuh/iac | 809 | 5.0.1 | 5 hours ago |
| cloudflared | ahgraber/homelab-gitops-k3s | 121 | 5.0.1 | a month ago |
See the most popular values for this chart:
| Key | Types |
|---|---|
| number | |
controllers.cloudflared.strategy (16) RollingUpdate | string |
controllers.cloudflared.containers.app.args[] (15) - tunnel | string |
| string | |
| boolean, string | |
| string | |
| boolean | |
controllers.cloudflared.containers.app.env.TUNNEL_CRED_FILE (6) /etc/cloudflared/creds/credentials.json | string |
| boolean | |
| string | |
| string | |
controllers.cloudflared.containers.app.env.TZ (3) Europe/Madrid | string |
| boolean | |
| string | |
| boolean | |
controllers.cloudflared.containers.app.image.repository (15) mirror.gcr.io/cloudflare/cloudflared | string |
controllers.cloudflared.containers.app.image.tag (15) 2026.8.1@sha256:d9ff527dc19799e24d3689058161fb01e752a24be1823577bae54c9c2489275f | string |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| string | |
| string | |
| string | |
| boolean | |
| string | |
| boolean | |
controllers.cloudflared.containers.app.envFrom[].secretRef.name (9) cloudflared-secret | string |
controllers.cloudflared.containers.cloudflared.args[] (3) - tunnel | string |
| string | |
| string | |
| string | |
controllers.cloudflared.containers.cloudflared.env.TUNNEL_CRED_FILE (2) /etc/cloudflared/creds/credentials.json | string |
| string | |
| string | |
| string | |
| string | |
controllers.cloudflared.containers.cloudflared.image.repository (3) docker.io/cloudflare/cloudflared | string |
controllers.cloudflared.containers.cloudflared.image.tag (3) 2026.7.2@sha256:4f6655284ab3d252b7f28fedb19fe6c8fc82ee5b1295c20ac74d475e5398a52d | string |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| string | |
| string | |
| string | |
| boolean | |
| string | |
| boolean | |
| string | |
| string | |
| string | |
| string | |
| string | |
| number | |
controllers.cloudflared.pod.topologySpreadConstraints[].topologyKey (4) kubernetes.io/hostname | string |
| string | |
| number | |
| boolean | |
| number | |
| number | |
| string | |
| string | |
| string | |
| boolean | |
| string | |
| boolean | |
controllers.main.containers.app.args[] (1) - tunnel | string |
| string | |
controllers.main.containers.app.env.TUNNEL_TOKEN.valueFrom.secretKeyRef.name (1) cloudflared-credentials | string |
| string | |
controllers.main.containers.app.image.repository (1) cloudflare/cloudflared | string |
controllers.main.containers.app.image.tag (1) 2026.7.3@sha256:e39ee8da81ad5e05d77f38d2f51c60ca51bf2a8450ac3abab50c17fdb91d91bf | string |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| string | |
| number | |
| number | |
| number | |
| string | |
| string | |
| string | |
| number | |
| number | |
| boolean | |
| number | |
| string | |
| number | |
| string | |
| boolean | |
| boolean | |
| string | |
| number | |
defaultPodOptions.topologySpreadConstraints[].topologyKey (1) kubernetes.io/hostname | string |
| string | |
| number | |
service.app.controller (6) cloudflared | string |
service.app.ipFamilyPolicy (1) PreferDualStack | string |
service.cloudflared.controller (3) cloudflared | string |
| number | |
| string | |
| number | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
serviceMonitor.app.serviceName (5) cloudflared | string |
| string | |
| string | |
| string | |
| string | |
| string | |
serviceMonitor.cloudflared.serviceName (3) cloudflared | string |
| boolean | |
| string | |
| string | |
| string | |
| string | |
persistence.config.globalMounts[].path (13) /etc/cloudflared/config/config.yaml | string |
| string | |
| boolean | |
persistence.config.type (13) configMap | string |
persistence.config.name (11) cloudflared-configmap | string |
| string | |
persistence.creds.globalMounts[].path (7) /etc/cloudflared/creds/credentials.json | string |
| boolean | |
persistence.creds.globalMounts[].subPath (7) credentials.json | string |
persistence.creds.name (7) cloudflared | string |
| string | |
persistence.config-file.globalMounts[].path (2) /etc/cloudflared/config.yaml | string |
| string | |
| boolean | |
persistence.config-file.type (2) configMap | string |
| string | |
persistence.config-file.name (1) cloudflared-configmap | string |
persistence.secret-file.globalMounts[].path (1) /etc/cloudflared/creds/credentials.json | string |
| boolean | |
persistence.secret-file.globalMounts[].subPath (1) credentials.json | string |
persistence.secret-file.name (1) cloudflared-tunnel-secret | string |
| string | |
persistence.tmp.type (1) emptyDir | string |
configMaps.config.data."config.yaml" (3) ingress:
- hostname: "*.${SECRET_DOMAIN}"
originRequest:
http2Origin: true
originServerName: external.${SECRET_DOMAIN}
service: https://envoy-external.{{ .Release.Namespace }}.svc.cluster.local:443
- service: http_status:404 | string |
fullnameOverride (1) cloudflared | string |
| string | |
rawResources.cloudflare-egress.manifest.kind (1) CiliumNetworkPolicy | string |
rawResources.cloudflare-egress.manifest.spec.egress[].toFQDNs[].matchName (1) region1.v2.argotunnel.com | string |
| string | |
| string | |
| string | |
| string | |
rawResources.cyberchef-egress.manifest.kind (1) CiliumNetworkPolicy | string |
| string | |
| string | |
| string | |
| string | |
| string | |
rawResources.dns-egress.manifest.apiVersion (1) cilium.io/v2 | string |
rawResources.dns-egress.manifest.kind (1) CiliumNetworkPolicy | string |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
rawResources.forgejo-egress.manifest.kind (1) CiliumNetworkPolicy | string |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
rawResources.healthchecks-egress.manifest.kind (1) CiliumNetworkPolicy | string |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
rawResources.it-tools-egress.manifest.kind (1) CiliumNetworkPolicy | string |
| string | |
| string | |
| string | |
| string | |
| string | |
rawResources.kuma-egress.manifest.apiVersion (1) cilium.io/v2 | string |
rawResources.kuma-egress.manifest.kind (1) CiliumNetworkPolicy | string |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
rawResources.librespeed-egress.manifest.kind (1) CiliumNetworkPolicy | string |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
rawResources.monitoring-ingress.manifest.kind (1) CiliumNetworkPolicy | string |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
rawResources.pocket-id-egress.manifest.kind (1) CiliumNetworkPolicy | string |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
rawResources.wastebin-egress.manifest.kind (1) CiliumNetworkPolicy | string |
| string | |
| string | |
| string | |
| string | |
| string |