Cloudflared is a lightweight proxy client for securely connecting applications to Cloudflare’s network. It powers Cloudflare Tunnel, allowing services to be exposed without opening ports or configuring firewall rules. cloudflared routes traffic through Cloudflare’s global network, enhancing security with DDoS protection, authentication, and encrypted connections. It supports HTTP, TCP, and QUIC, making it ideal for self-hosted services, remote access, and zero-trust networking.
cloudflared from bjw-s-labs/charts/ is more popular with 76 repositories.
Install with:
helm repo add cloudflared oci://ghcr.io/bjw-s-labs/charts/
helm install cloudflared cloudflared/cloudflared -f values.yamlSee examples from other people.
| Name | Repo | Stars | Version | Timestamp |
|---|---|---|---|---|
| cloudflared | Mafyuh/iac | 437 | 4.6.2 | 7 days ago |
| cloudflared | ahgraber/homelab-gitops-k3s | 109 | 4.6.2 | a month ago |
See the most popular values for this chart:
| Key | Types |
|---|---|
| number | |
service.app.controller (5) cloudflared | string |
| string | |
| string | |
| string | |
| string | |
| string | |
serviceMonitor.app.serviceName (5) cloudflared | string |
controllers.cloudflared.containers.app.args[] (12) - tunnel | string |
| string, boolean | |
| string | |
| string | |
controllers.cloudflared.containers.app.env.TUNNEL_CRED_FILE (5) /etc/cloudflared/creds/credentials.json | string |
| boolean | |
| string | |
| string | |
| boolean | |
controllers.cloudflared.containers.app.env.TZ (2) America/New_York | string |
| boolean | |
controllers.cloudflared.containers.app.image.repository (12) docker.io/cloudflare/cloudflared | string |
controllers.cloudflared.containers.app.image.tag (12) 2026.3.0@sha256:6b599ca3e974349ead3286d178da61d291961182ec3fe9c505e1dd02c8ac31b0 | string |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| string | |
| string | |
| string | |
| boolean | |
| string | |
| boolean | |
controllers.cloudflared.containers.app.envFrom[].secretRef.name (7) {{ .Release.Name }} | string |
| number | |
controllers.cloudflared.strategy (12) RollingUpdate | string |
| string | |
| string | |
| string | |
| string | |
| number | |
| boolean | |
| number | |
| number | |
| string | |
| string | |
| number | |
controllers.cloudflared.pod.topologySpreadConstraints[].topologyKey (3) kubernetes.io/hostname | string |
| string | |
| boolean | |
| string | |
| boolean | |
| string | |
| string | |
| boolean | |
| string | |
controllers.cloudflare-tunnel.containers.app.envFrom[].secretRef.name (1) {{ .Release.Name }}-secret | string |
controllers.cloudflare-tunnel.containers.app.image.repository (1) mirror.gcr.io/cloudflare/cloudflared | string |
controllers.cloudflare-tunnel.containers.app.image.tag (1) 2026.3.0@sha256:6b599ca3e974349ead3286d178da61d291961182ec3fe9c505e1dd02c8ac31b0 | string |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| string | |
| string | |
| boolean | |
| string | |
| boolean | |
| number | |
controllers.cloudflare-tunnel.strategy (1) RollingUpdate | string |
| number | |
| boolean | |
| number | |
| string | |
| number | |
| string | |
| boolean | |
| string | |
| number | |
defaultPodOptions.topologySpreadConstraints[].topologyKey (1) kubernetes.io/hostname | string |
| string | |
persistence.config.globalMounts[].path (9) /etc/cloudflared/config.yaml | string |
| string | |
| boolean | |
persistence.config.type (9) configMap | string |
persistence.config.name (5) cloudflared-config | string |
| string | |
persistence.creds.globalMounts[].path (4) /etc/cloudflared/creds/credentials.json | string |
| boolean | |
persistence.creds.globalMounts[].subPath (4) credentials.json | string |
persistence.creds.name (4) cloudflared | string |
| string | |
persistence.config-file.globalMounts[].path (2) /etc/cloudflared/config.yaml | string |
| string | |
| boolean | |
persistence.config-file.type (2) configMap | string |
| string | |
persistence.config-file.name (1) cloudflared-configmap | string |
persistence.secret-file.globalMounts[].path (1) /etc/cloudflared/creds/credentials.json | string |
| boolean | |
persistence.secret-file.globalMounts[].subPath (1) credentials.json | string |
persistence.secret-file.name (1) cloudflared-tunnel-secret | string |
| string | |
persistence.tmp.type (1) emptyDir | string |
configMaps.config.data."config.yaml" (5) ingress:
- hostname: "*.aresu.eu"
originRequest:
http2Origin: true
originServerName: ingress-ext.aresu.eu
service: https://envoy-external.{{ .Release.Namespace }}.svc.cluster.local:443
- service: http_status:404 | string |