Cloudflared is a lightweight proxy client for securely connecting applications to Cloudflare’s network. It powers Cloudflare Tunnel, allowing services to be exposed without opening ports or configuring firewall rules. cloudflared routes traffic through Cloudflare’s global network, enhancing security with DDoS protection, authentication, and encrypted connections. It supports HTTP, TCP, and QUIC, making it ideal for self-hosted services, remote access, and zero-trust networking.
cloudflared from bjw-s-labs/charts is more popular with 67 repositories.
Install with:
helm repo add cloudflared oci://ghcr.io/bjw-s-labs/charts/
helm install cloudflared cloudflared/cloudflared -f values.yamlSee examples from other people.
| Name | Repo | Stars | Version | Timestamp |
|---|---|---|---|---|
| cloudflared | Mafyuh/iac | 506 | 5.0.1 | 2 days ago |
| cloudflared | ahgraber/homelab-gitops-k3s | 119 | 5.0.1 | 4 months ago |
See the most popular values for this chart:
| Key | Types |
|---|---|
| number | |
controllers.cloudflared.strategy (9) RollingUpdate | string |
controllers.cloudflared.containers.app.args[] (8) - tunnel | string |
| string | |
| boolean, string | |
| string | |
| boolean | |
controllers.cloudflared.containers.app.env.TUNNEL_CRED_FILE (3) /etc/cloudflared/creds/credentials.json | string |
| boolean | |
controllers.cloudflared.containers.app.env.TZ (3) Europe/Madrid | string |
| boolean | |
| string | |
| string | |
| boolean | |
controllers.cloudflared.containers.app.image.repository (8) mirror.gcr.io/cloudflare/cloudflared | string |
controllers.cloudflared.containers.app.image.tag (8) 2026.6.0@sha256:ba461b8aa9c042156dbd39c38657fe7431bafa063220eab8d5330a523863da9f | string |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| string | |
| string | |
| string | |
| boolean | |
| string | |
| boolean | |
controllers.cloudflared.containers.app.envFrom[].secretRef.name (5) {{ .Release.Name }} | string |
controllers.cloudflared.containers.cloudflared.args[] (3) - tunnel | string |
| string | |
| string | |
| string | |
controllers.cloudflared.containers.cloudflared.env.TUNNEL_CRED_FILE (2) /etc/cloudflared/creds/credentials.json | string |
| string | |
| string | |
| string | |
| string | |
controllers.cloudflared.containers.cloudflared.image.repository (3) docker.io/cloudflare/cloudflared | string |
controllers.cloudflared.containers.cloudflared.image.tag (3) 2026.6.0@sha256:ba461b8aa9c042156dbd39c38657fe7431bafa063220eab8d5330a523863da9f | string |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| string | |
| string | |
| string | |
| boolean | |
| string | |
| boolean | |
| string | |
| string | |
| string | |
| string | |
| number | |
| boolean | |
| number | |
| number | |
| string | |
| string | |
| number | |
controllers.cloudflared.pod.topologySpreadConstraints[].topologyKey (3) kubernetes.io/hostname | string |
| string | |
| string | |
| string | |
| boolean | |
| string | |
| boolean | |
| number | |
| boolean | |
| number | |
| string | |
| number | |
| string | |
| boolean | |
| boolean | |
| string | |
| number | |
defaultPodOptions.topologySpreadConstraints[].topologyKey (1) kubernetes.io/hostname | string |
| string | |
| number | |
service.app.controller (3) cloudflared | string |
service.cloudflared.controller (3) cloudflared | string |
| number | |
| string | |
| string | |
| string | |
| string | |
| string | |
serviceMonitor.app.serviceName (2) cloudflared | string |
| string | |
| string | |
| string | |
| string | |
| string | |
serviceMonitor.cloudflared.serviceName (3) cloudflared | string |
persistence.config.globalMounts[].path (7) /etc/cloudflared/config/config.yaml | string |
| string | |
| boolean | |
persistence.config.type (7) configMap | string |
persistence.config.name (6) cloudflared-config | string |
| string | |
persistence.creds.globalMounts[].path (4) /etc/cloudflared/creds/credentials.json | string |
| boolean | |
persistence.creds.globalMounts[].subPath (4) credentials.json | string |
persistence.creds.name (4) cloudflared | string |
| string | |
persistence.config-file.globalMounts[].path (1) /etc/cloudflared/config/config.yaml | string |
| boolean | |
| string | |
persistence.config-file.name (1) cloudflared-configmap | string |
persistence.config-file.type (1) configMap | string |
persistence.secret-file.globalMounts[].path (1) /etc/cloudflared/creds/credentials.json | string |
| boolean | |
persistence.secret-file.globalMounts[].subPath (1) credentials.json | string |
persistence.secret-file.name (1) cloudflared-tunnel-secret | string |
| string | |
persistence.tmp.type (1) emptyDir | string |
configMaps.config.data."config.yaml" (1) ingress:
- hostname: "*.mapanare.net"
originRequest:
http2Origin: true
keepAliveTimeout: 3600s
originServerName: external.mapanare.net
tcpKeepAlive: 7200s
service: https://envoy-external.{{ .Release.Namespace }}.svc.cluster.local:443
- service: http_status:404 | string |
fullnameOverride (1) cloudflared | string |
| string | |
rawResources.cloudflare-egress.manifest.kind (1) CiliumNetworkPolicy | string |
rawResources.cloudflare-egress.manifest.spec.egress[].toFQDNs[].matchName (1) region1.v2.argotunnel.com | string |
| string | |
| string | |
| string | |
rawResources.dns-egress.manifest.apiVersion (1) cilium.io/v2 | string |
rawResources.dns-egress.manifest.kind (1) CiliumNetworkPolicy | string |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
rawResources.healthchecks-egress.manifest.kind (1) CiliumNetworkPolicy | string |
| string | |
| string | |
| string | |
| string | |
| string |