cloudflare-tunnel helm

No introduction found. Create it?

Install

Install with:

helm repo add app-template oci://ghcr.io/bjw-s-labs/helm/app-template
helm install cloudflare-tunnel app-template/app-template -f values.yaml

Examples

See examples from other people.

Top Repositories (5 out of 53)

NameRepoStarsVersionTimestamp
cloudflare-tunnelauricom/home-ops2004.5.07 days ago
cloudflare-tunnelanthr76/infra1064.5.016 days ago
cloudflare-tunnelnicolerenee/infra1014.5.0a month ago
cloudflare-tunnelrafaribe/home-ops904.5.0a month ago
cloudflare-tunnelxunholy/k8s-gitops6074.5.0a month ago

Values

See the most popular values for this chart:

KeyTypes
defaultPodOptions.securityContext.runAsGroup (52)
1000
number, string
defaultPodOptions.securityContext.runAsNonRoot (52)
true
boolean
defaultPodOptions.securityContext.runAsUser (52)
1000
number, string
defaultPodOptions.securityContext.seccompProfile.type (7)
RuntimeDefault
string
defaultPodOptions.automountServiceAccountToken (2)
boolean
defaultPodOptions.dnsConfig.options[].name (2)
string
defaultPodOptions.dnsConfig.options[].value (2)
string
defaultPodOptions.enableServiceLinks (2)
boolean
defaultPodOptions.labels."egress.cilium.io/envoy" (2)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].key (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].operator (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].values[] (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)
number
defaultPodOptions.tolerations[].effect (1)
string
defaultPodOptions.tolerations[].key (1)
string
defaultPodOptions.tolerations[].operator (1)
string
defaultPodOptions.tolerations[].value (1)
string
service.app.ports.http.port (51)
8080
number
service.app.controller (8)
cloudflare-tunnel
string
service.cloudflare-tunnel.controller (2)
string
service.cloudflare-tunnel.ports.http.port (2)
number
serviceMonitor.app.endpoints[].port (51)
http
string
serviceMonitor.app.endpoints[].interval (5)
1m
string
serviceMonitor.app.endpoints[].path (5)
/metrics
string
serviceMonitor.app.endpoints[].scheme (5)
http
string
serviceMonitor.app.endpoints[].scrapeTimeout (5)
10s
string
serviceMonitor.app.serviceName (7)
cloudflare-tunnel
string
serviceMonitor.cloudflare-tunnel.endpoints[].port (1)
string
serviceMonitor.cloudflare-tunnel.serviceName (1)
string
serviceMonitor.metrics.endpoints[].port (1)
string
serviceMonitor.metrics.serviceName (1)
string
controllers.cloudflare-tunnel.strategy (50)
RollingUpdate
string
controllers.cloudflare-tunnel.annotations."reloader.stakater.com/auto" (48)
true
string
controllers.cloudflare-tunnel.containers.app.args[] (48)
- tunnel
- run
string
controllers.cloudflare-tunnel.containers.app.env.NO_AUTOUPDATE (48)
true
boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_METRICS (48)
0.0.0.0:8080
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_TRANSPORT_PROTOCOL (47)
quic
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_POST_QUANTUM (44)
true
boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (30)
true
boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_CRED_FILE (3)
/etc/cloudflared/creds/credentials.json
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.key (2)
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.name (2)
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_LOGLEVEL (1)
string
controllers.cloudflare-tunnel.containers.app.image.repository (48)
docker.io/cloudflare/cloudflared
string
controllers.cloudflare-tunnel.containers.app.image.tag (48)
2025.11.1@sha256:89ee50efb1e9cb2ae30281a8a404fed95eb8f02f0a972617526f8c5b417acae2
string
controllers.cloudflare-tunnel.containers.app.probes.liveness.custom (48)
true
boolean
controllers.cloudflare-tunnel.containers.app.probes.liveness.enabled (48)
true
boolean
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.failureThreshold (48)
3
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.path (48)
/ready
string
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.port (48)
8080
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.initialDelaySeconds (48)
0
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.periodSeconds (48)
10
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.timeoutSeconds (48)
1
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.custom (48)
true
boolean
controllers.cloudflare-tunnel.containers.app.probes.readiness.enabled (48)
true
boolean
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.failureThreshold (48)
3
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.path (48)
/ready
string
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.port (48)
8080
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.initialDelaySeconds (48)
0
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.periodSeconds (48)
10
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.timeoutSeconds (48)
1
number
controllers.cloudflare-tunnel.containers.app.resources.limits.memory (48)
256Mi
string
controllers.cloudflare-tunnel.containers.app.resources.limits.cpu (1)
string
controllers.cloudflare-tunnel.containers.app.resources.requests.cpu (48)
10m
string
controllers.cloudflare-tunnel.containers.app.resources.requests.memory (4)
string
controllers.cloudflare-tunnel.containers.app.securityContext.allowPrivilegeEscalation (48)
false
boolean
controllers.cloudflare-tunnel.containers.app.securityContext.capabilities.drop[] (48)
- ALL
string
controllers.cloudflare-tunnel.containers.app.securityContext.readOnlyRootFilesystem (48)
true
boolean
controllers.cloudflare-tunnel.containers.app.envFrom[].secretRef.name (43)
cloudflare-tunnel-secret
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.args[] (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.NO_AUTOUPDATE (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.TUNNEL_METRICS (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.TUNNEL_POST_QUANTUM (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.TUNNEL_TRANSPORT_PROTOCOL (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (1)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.envFrom[].secretRef.name (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.image.repository (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.image.tag (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.custom (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.enabled (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.failureThreshold (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.httpGet.path (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.httpGet.port (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.initialDelaySeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.periodSeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.timeoutSeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.custom (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.enabled (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.failureThreshold (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.httpGet.path (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.httpGet.port (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.initialDelaySeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.periodSeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.timeoutSeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.resources.limits.memory (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.resources.limits.cpu (1)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.resources.requests.cpu (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.allowPrivilegeEscalation (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.capabilities.drop[] (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.readOnlyRootFilesystem (2)
boolean
controllers.cloudflare-tunnel.replicas (29)
2
number, string
controllers.cloudflare-tunnel.pod.securityContext.runAsGroup (1)
number
controllers.cloudflare-tunnel.pod.securityContext.runAsNonRoot (1)
boolean
controllers.cloudflare-tunnel.pod.securityContext.runAsUser (1)
number
controllers.cloudflare-tunnel.podDisruptionBudget.minAvailable (1)
number
controllers.main.containers.app.args[] (2)
string
controllers.main.containers.app.env.NO_AUTOUPDATE (2)
boolean
controllers.main.containers.app.env.TUNNEL_METRICS (2)
string
controllers.main.containers.app.env.TUNNEL_POST_QUANTUM (2)
boolean
controllers.main.containers.app.env.TUNNEL_TRANSPORT_PROTOCOL (2)
string
controllers.main.containers.app.envFrom[].secretRef.name (2)
string
controllers.main.containers.app.image.repository (2)
string
controllers.main.containers.app.image.tag (2)
string
controllers.main.containers.app.probes.liveness.custom (2)
boolean
controllers.main.containers.app.probes.liveness.enabled (2)
boolean
controllers.main.containers.app.probes.liveness.spec.failureThreshold (2)
number
controllers.main.containers.app.probes.liveness.spec.httpGet.path (2)
string
controllers.main.containers.app.probes.liveness.spec.httpGet.port (2)
number
controllers.main.containers.app.probes.liveness.spec.initialDelaySeconds (2)
number
controllers.main.containers.app.probes.liveness.spec.periodSeconds (2)
number
controllers.main.containers.app.probes.liveness.spec.timeoutSeconds (2)
number
controllers.main.containers.app.probes.readiness.custom (2)
boolean
controllers.main.containers.app.probes.readiness.enabled (2)
boolean
controllers.main.containers.app.probes.readiness.spec.failureThreshold (2)
number
controllers.main.containers.app.probes.readiness.spec.httpGet.path (2)
string
controllers.main.containers.app.probes.readiness.spec.httpGet.port (2)
number
controllers.main.containers.app.probes.readiness.spec.initialDelaySeconds (2)
number
controllers.main.containers.app.probes.readiness.spec.periodSeconds (2)
number
controllers.main.containers.app.probes.readiness.spec.timeoutSeconds (2)
number
controllers.main.containers.app.resources.limits.memory (2)
string
controllers.main.containers.app.resources.requests.cpu (2)
string
controllers.main.containers.app.securityContext.allowPrivilegeEscalation (2)
boolean
controllers.main.containers.app.securityContext.capabilities.drop[] (2)
string
controllers.main.containers.app.securityContext.readOnlyRootFilesystem (2)
boolean
controllers.main.replicas (2)
number
controllers.main.strategy (2)
string
controllers.cloudflared.annotations."reloader.stakater.com/auto" (1)
string
controllers.cloudflared.containers.app.args[] (1)
string
controllers.cloudflared.containers.app.env.NO_AUTOUPDATE (1)
boolean
controllers.cloudflared.containers.app.env.TUNNEL_CRED_FILE (1)
string
controllers.cloudflared.containers.app.env.TUNNEL_ID (1)
string
controllers.cloudflared.containers.app.env.TUNNEL_METRICS (1)
string
controllers.cloudflared.containers.app.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (1)
boolean
controllers.cloudflared.containers.app.env.TUNNEL_POST_QUANTUM (1)
boolean
controllers.cloudflared.containers.app.env.TUNNEL_TRANSPORT_PROTOCOL (1)
string
controllers.cloudflared.containers.app.image.repository (1)
string
controllers.cloudflared.containers.app.image.tag (1)
string
controllers.cloudflared.containers.app.probes.liveness.custom (1)
boolean
controllers.cloudflared.containers.app.probes.liveness.enabled (1)
boolean
controllers.cloudflared.containers.app.probes.liveness.spec.failureThreshold (1)
number
controllers.cloudflared.containers.app.probes.liveness.spec.httpGet.path (1)
string
controllers.cloudflared.containers.app.probes.liveness.spec.httpGet.port (1)
number
controllers.cloudflared.containers.app.probes.liveness.spec.initialDelaySeconds (1)
number
controllers.cloudflared.containers.app.probes.liveness.spec.periodSeconds (1)
number
controllers.cloudflared.containers.app.probes.liveness.spec.timeoutSeconds (1)
number
controllers.cloudflared.containers.app.probes.readiness.custom (1)
boolean
controllers.cloudflared.containers.app.probes.readiness.enabled (1)
boolean
controllers.cloudflared.containers.app.probes.readiness.spec.failureThreshold (1)
number
controllers.cloudflared.containers.app.probes.readiness.spec.httpGet.path (1)
string
controllers.cloudflared.containers.app.probes.readiness.spec.httpGet.port (1)
number
controllers.cloudflared.containers.app.probes.readiness.spec.initialDelaySeconds (1)
number
controllers.cloudflared.containers.app.probes.readiness.spec.periodSeconds (1)
number
controllers.cloudflared.containers.app.probes.readiness.spec.timeoutSeconds (1)
number
controllers.cloudflared.containers.app.resources.limits.memory (1)
string
controllers.cloudflared.containers.app.resources.requests.cpu (1)
string
controllers.cloudflared.containers.app.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.cloudflared.containers.app.securityContext.capabilities.drop[] (1)
string
controllers.cloudflared.containers.app.securityContext.readOnlyRootFilesystem (1)
boolean
controllers.cloudflared.replicas (1)
number
controllers.cloudflared.strategy (1)
string
persistence.config-file.globalMounts[].path (44)
/etc/cloudflared/config.yaml
string
persistence.config-file.globalMounts[].subPath (44)
config.yaml
string
persistence.config-file.globalMounts[].readOnly (23)
true
boolean
persistence.config-file.type (44)
configMap
string
persistence.config-file.identifier (22)
config
string
persistence.config-file.name (22)
cloudflare-tunnel-configmap
string
persistence.config-file.enabled (1)
boolean
persistence.config.globalMounts[].path (8)
/etc/cloudflared/config/config.yaml
string
persistence.config.globalMounts[].subPath (8)
config.yaml
string
persistence.config.globalMounts[].readOnly (5)
true
boolean
persistence.config.type (8)
configMap
string
persistence.config.name (6)
cloudflare-tunnel-configmap
string
persistence.config.identifier (2)
string
persistence.config.enabled (1)
boolean
persistence.creds.globalMounts[].path (5)
/etc/cloudflared/creds/credentials.json
string
persistence.creds.globalMounts[].readOnly (5)
true
boolean
persistence.creds.globalMounts[].subPath (5)
credentials.json
string
persistence.creds.name (5)
cloudflare-tunnel-secret
string
persistence.creds.type (5)
secret
string
persistence.homelab-ca.globalMounts[].path (2)
string
persistence.homelab-ca.globalMounts[].subPath (2)
string
persistence.homelab-ca.name (2)
string
persistence.homelab-ca.type (2)
string
persistence.credentials.globalMounts[].path (1)
string
persistence.credentials.globalMounts[].subPath (1)
string
persistence.credentials.name (1)
string
persistence.credentials.type (1)
string
configMaps.config.data."config.yaml" (24)
ingress: - hostname: "*.${SECRET_DOMAIN}" originRequest: http2Origin: true originServerName: external.${SECRET_DOMAIN} service: https://envoy-external.{{ .Release.Namespace }}.svc.cluster.local:443 - service: http_status:404
string