cloudflared helm

Cloudflared is a lightweight proxy client for securely connecting applications to Cloudflare’s network. It powers Cloudflare Tunnel, allowing services to be exposed without opening ports or configuring firewall rules. cloudflared routes traffic through Cloudflare’s global network, enhancing security with DDoS protection, authentication, and encrypted connections. It supports HTTP, TCP, and QUIC, making it ideal for self-hosted services, remote access, and zero-trust networking.

More popular helm chart found

cloudflared from bjw-s-labs/charts/ is more popular with 82 repositories.

Install

Install with:

helm repo add cloudflared oci://ghcr.io/bjw-s-labs/charts/
helm install cloudflared cloudflared/cloudflared -f values.yaml

Examples

See examples from other people.

Top Repositories (4 out of 13)

NameRepoStarsVersionTimestamp
cloudflaredahgraber/homelab-gitops-k3s1084.6.27 days ago
cloudflaredbjw-s-labs/home-ops8084.6.212 days ago
cloudflaredbjw-s/home-ops3954.6.212 days ago
cloudflaredMafyuh/iac4304.6.223 days ago

Values

See the most popular values for this chart:

KeyTypes
service.app.ports.http.port (13)
8080
number
service.app.controller (3)
cloudflared
string
serviceMonitor.app.endpoints[].port (13)
http
string
serviceMonitor.app.endpoints[].interval (8)
1m
string
serviceMonitor.app.endpoints[].path (8)
/metrics
string
serviceMonitor.app.endpoints[].scheme (8)
http
string
serviceMonitor.app.endpoints[].scrapeTimeout (8)
30s
string
serviceMonitor.app.serviceName (3)
cloudflared
string
controllers.cloudflared.containers.app.args[] (12)
- tunnel
- run
string
controllers.cloudflared.containers.app.env.NO_AUTOUPDATE (12)
true
string, boolean
controllers.cloudflared.containers.app.env.TUNNEL_METRICS (12)
0.0.0.0:8080
string
controllers.cloudflared.containers.app.env.TUNNEL_TRANSPORT_PROTOCOL (8)
quic
string
controllers.cloudflared.containers.app.env.TUNNEL_POST_QUANTUM (7)
true
boolean
controllers.cloudflared.containers.app.env.TUNNEL_CRED_FILE (3)
/etc/cloudflared/creds/credentials.json
string
controllers.cloudflared.containers.app.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (3)
true
boolean
controllers.cloudflared.containers.app.env.TZ (2)
string
controllers.cloudflared.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.key (1)
string
controllers.cloudflared.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.name (1)
string
controllers.cloudflared.containers.app.env.TUNNEL_MANAGEMENT_DIAGNOSTICS (1)
boolean
controllers.cloudflared.containers.app.image.repository (12)
docker.io/cloudflare/cloudflared
string
controllers.cloudflared.containers.app.image.tag (12)
2026.2.0@sha256:404528c1cd63c3eb882c257ae524919e4376115e6fe57befca8d603656a91a4c
string
controllers.cloudflared.containers.app.probes.liveness.custom (12)
true
boolean
controllers.cloudflared.containers.app.probes.liveness.enabled (12)
true
boolean
controllers.cloudflared.containers.app.probes.liveness.spec.failureThreshold (12)
3
number
controllers.cloudflared.containers.app.probes.liveness.spec.httpGet.path (12)
/ready
string
controllers.cloudflared.containers.app.probes.liveness.spec.httpGet.port (12)
8080
number
controllers.cloudflared.containers.app.probes.liveness.spec.periodSeconds (12)
10
number
controllers.cloudflared.containers.app.probes.liveness.spec.timeoutSeconds (12)
1
number
controllers.cloudflared.containers.app.probes.liveness.spec.initialDelaySeconds (11)
0
number
controllers.cloudflared.containers.app.probes.readiness.custom (12)
true
boolean
controllers.cloudflared.containers.app.probes.readiness.enabled (12)
true
boolean
controllers.cloudflared.containers.app.probes.readiness.spec.failureThreshold (12)
3
number
controllers.cloudflared.containers.app.probes.readiness.spec.httpGet.path (12)
/ready
string
controllers.cloudflared.containers.app.probes.readiness.spec.httpGet.port (12)
8080
number
controllers.cloudflared.containers.app.probes.readiness.spec.periodSeconds (12)
10
number
controllers.cloudflared.containers.app.probes.readiness.spec.timeoutSeconds (12)
1
number
controllers.cloudflared.containers.app.probes.readiness.spec.initialDelaySeconds (11)
0
number
controllers.cloudflared.containers.app.probes.startup.enabled (1)
boolean
controllers.cloudflared.containers.app.resources.limits.memory (12)
128Mi
string
controllers.cloudflared.containers.app.resources.requests.cpu (12)
10m
string
controllers.cloudflared.containers.app.resources.requests.memory (2)
string
controllers.cloudflared.containers.app.securityContext.allowPrivilegeEscalation (12)
false
boolean
controllers.cloudflared.containers.app.securityContext.capabilities.drop[] (12)
- ALL
string
controllers.cloudflared.containers.app.securityContext.readOnlyRootFilesystem (12)
true
boolean
controllers.cloudflared.containers.app.envFrom[].secretRef.name (9)
cloudflared-secret
string
controllers.cloudflared.replicas (12)
2
number
controllers.cloudflared.strategy (12)
RollingUpdate
string
controllers.cloudflared.annotations."reloader.stakater.com/auto" (6)
true
string
controllers.cloudflared.annotations."reloader.stakater.com/search" (1)
string
controllers.cloudflared.pod.securityContext.runAsGroup (6)
2000
number
controllers.cloudflared.pod.securityContext.runAsNonRoot (6)
true
boolean
controllers.cloudflared.pod.securityContext.runAsUser (6)
2000
number
controllers.cloudflared.pod.securityContext.fsGroup (2)
number
controllers.cloudflared.pod.securityContext.fsGroupChangePolicy (2)
string
controllers.cloudflared.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)
string
controllers.cloudflared.pod.topologySpreadConstraints[].maxSkew (1)
number
controllers.cloudflared.pod.topologySpreadConstraints[].topologyKey (1)
string
controllers.cloudflared.pod.topologySpreadConstraints[].whenUnsatisfiable (1)
string
controllers.cloudflare-tunnel.annotations."reloader.stakater.com/auto" (1)
string
controllers.cloudflare-tunnel.containers.app.args[] (1)
string
controllers.cloudflare-tunnel.containers.app.env.NO_AUTOUPDATE (1)
boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_METRICS (1)
string
controllers.cloudflare-tunnel.containers.app.envFrom[].secretRef.name (1)
string
controllers.cloudflare-tunnel.containers.app.image.repository (1)
string
controllers.cloudflare-tunnel.containers.app.image.tag (1)
string
controllers.cloudflare-tunnel.containers.app.probes.liveness.custom (1)
boolean
controllers.cloudflare-tunnel.containers.app.probes.liveness.enabled (1)
boolean
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.failureThreshold (1)
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.path (1)
string
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.port (1)
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.initialDelaySeconds (1)
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.periodSeconds (1)
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.timeoutSeconds (1)
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.custom (1)
boolean
controllers.cloudflare-tunnel.containers.app.probes.readiness.enabled (1)
boolean
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.failureThreshold (1)
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.path (1)
string
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.port (1)
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.initialDelaySeconds (1)
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.periodSeconds (1)
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.timeoutSeconds (1)
number
controllers.cloudflare-tunnel.containers.app.resources.limits.memory (1)
string
controllers.cloudflare-tunnel.containers.app.resources.requests.cpu (1)
string
controllers.cloudflare-tunnel.containers.app.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.cloudflare-tunnel.containers.app.securityContext.capabilities.drop[] (1)
string
controllers.cloudflare-tunnel.containers.app.securityContext.readOnlyRootFilesystem (1)
boolean
controllers.cloudflare-tunnel.replicas (1)
number
controllers.cloudflare-tunnel.strategy (1)
string
persistence.config.globalMounts[].path (9)
/etc/cloudflared/config.yaml
string
persistence.config.globalMounts[].subPath (9)
config.yaml
string
persistence.config.globalMounts[].readOnly (4)
true
boolean
persistence.config.type (9)
configMap
string
persistence.config.identifier (6)
config
string
persistence.config.name (3)
string
persistence.creds.globalMounts[].path (2)
string
persistence.creds.globalMounts[].readOnly (2)
boolean
persistence.creds.globalMounts[].subPath (2)
string
persistence.creds.name (2)
string
persistence.creds.type (2)
string
persistence.config-file.globalMounts[].path (1)
string
persistence.config-file.globalMounts[].readOnly (1)
boolean
persistence.config-file.globalMounts[].subPath (1)
string
persistence.config-file.name (1)
string
persistence.config-file.type (1)
string
persistence.secret-file.globalMounts[].path (1)
string
persistence.secret-file.globalMounts[].readOnly (1)
boolean
persistence.secret-file.globalMounts[].subPath (1)
string
persistence.secret-file.name (1)
string
persistence.secret-file.type (1)
string
persistence.tmp.type (1)
string
configMaps.config.data."config.yaml" (7)
string
defaultPodOptions.securityContext.runAsGroup (7)
1000
number
defaultPodOptions.securityContext.runAsNonRoot (7)
true
boolean
defaultPodOptions.securityContext.runAsUser (7)
1000
number
defaultPodOptions.securityContext.seccompProfile.type (3)
RuntimeDefault
string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)
string
defaultPodOptions.topologySpreadConstraints[].maxSkew (1)
number
defaultPodOptions.topologySpreadConstraints[].topologyKey (1)
string
defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (1)
string