cloudflare-tunnel helm

No introduction found. Create it?

Install

Install with:

helm repo add cloudflare-tunnel oci://ghcr.io/bjw-s-labs/helm/app-template
helm install cloudflare-tunnel cloudflare-tunnel/app-template -f values.yaml

Examples

See examples from other people.

Top Repositories (5 out of 57)

NameRepoStarsVersionTimestamp
cloudflare-tunnelmchestr/home-cluster1484.6.05 days ago
cloudflare-tunneloscaromeu/home-ops314.6.08 days ago
cloudflare-tunneljoryirving/home-ops1924.6.012 days ago
cloudflare-tunnelonedr0p/home-ops26884.6.013 days ago
cloudflare-tunnelxunholy/k8s-gitops6144.6.015 days ago

Values

See the most popular values for this chart:

KeyTypes
defaultPodOptions.securityContext.runAsGroup (56)
1000
number, string
defaultPodOptions.securityContext.runAsNonRoot (56)
true
boolean
defaultPodOptions.securityContext.runAsUser (56)
1000
number, string
defaultPodOptions.securityContext.seccompProfile.type (7)
RuntimeDefault
string
defaultPodOptions.automountServiceAccountToken (2)
boolean
defaultPodOptions.dnsConfig.options[].name (2)
string
defaultPodOptions.dnsConfig.options[].value (2)
string
defaultPodOptions.enableServiceLinks (2)
boolean
defaultPodOptions.labels."egress.cilium.io/envoy" (2)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].key (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].operator (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].values[] (1)
string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)
number
defaultPodOptions.tolerations[].effect (1)
string
defaultPodOptions.tolerations[].key (1)
string
defaultPodOptions.tolerations[].operator (1)
string
defaultPodOptions.tolerations[].value (1)
string
service.app.ports.http.port (55)
8080
number
service.app.controller (6)
cloudflare-tunnel
string
service.cloudflare-tunnel.controller (2)
string
service.cloudflare-tunnel.ports.http.port (2)
number
serviceMonitor.app.endpoints[].port (55)
http
string
serviceMonitor.app.endpoints[].interval (5)
1m
string
serviceMonitor.app.endpoints[].path (5)
/metrics
string
serviceMonitor.app.endpoints[].scheme (5)
http
string
serviceMonitor.app.endpoints[].scrapeTimeout (5)
10s
string
serviceMonitor.app.serviceName (6)
cloudflare-tunnel
string
serviceMonitor.cloudflare-tunnel.endpoints[].port (1)
string
serviceMonitor.cloudflare-tunnel.serviceName (1)
string
serviceMonitor.metrics.endpoints[].port (1)
string
serviceMonitor.metrics.serviceName (1)
string
controllers.cloudflare-tunnel.strategy (54)
RollingUpdate
string
controllers.cloudflare-tunnel.annotations."reloader.stakater.com/auto" (52)
true
string
controllers.cloudflare-tunnel.containers.app.args[] (52)
- tunnel
- run
string
controllers.cloudflare-tunnel.containers.app.env.NO_AUTOUPDATE (52)
true
boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_METRICS (52)
0.0.0.0:8080
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_TRANSPORT_PROTOCOL (44)
quic
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_POST_QUANTUM (41)
true
boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (27)
true
boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_CRED_FILE (3)
/etc/cloudflared/creds/credentials.json
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.key (2)
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.name (2)
string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_LOGLEVEL (1)
string
controllers.cloudflare-tunnel.containers.app.image.repository (52)
docker.io/cloudflare/cloudflared
string
controllers.cloudflare-tunnel.containers.app.image.tag (52)
2025.11.1@sha256:89ee50efb1e9cb2ae30281a8a404fed95eb8f02f0a972617526f8c5b417acae2
string
controllers.cloudflare-tunnel.containers.app.probes.liveness.custom (52)
true
boolean
controllers.cloudflare-tunnel.containers.app.probes.liveness.enabled (52)
true
boolean
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.failureThreshold (52)
3
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.path (52)
/ready
string
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.port (52)
8080
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.initialDelaySeconds (52)
0
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.periodSeconds (52)
10
number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.timeoutSeconds (52)
1
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.custom (52)
true
boolean
controllers.cloudflare-tunnel.containers.app.probes.readiness.enabled (52)
true
boolean
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.failureThreshold (52)
3
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.path (52)
/ready
string
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.port (52)
8080
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.initialDelaySeconds (52)
0
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.periodSeconds (52)
10
number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.timeoutSeconds (52)
1
number
controllers.cloudflare-tunnel.containers.app.resources.limits.memory (52)
256Mi
string
controllers.cloudflare-tunnel.containers.app.resources.requests.cpu (52)
10m
string
controllers.cloudflare-tunnel.containers.app.resources.requests.memory (4)
string
controllers.cloudflare-tunnel.containers.app.securityContext.allowPrivilegeEscalation (52)
false
boolean
controllers.cloudflare-tunnel.containers.app.securityContext.capabilities.drop[] (52)
- ALL
string
controllers.cloudflare-tunnel.containers.app.securityContext.readOnlyRootFilesystem (52)
true
boolean
controllers.cloudflare-tunnel.containers.app.envFrom[].secretRef.name (47)
cloudflare-tunnel-secret
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.args[] (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.NO_AUTOUPDATE (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.TUNNEL_METRICS (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.TUNNEL_POST_QUANTUM (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.TUNNEL_TRANSPORT_PROTOCOL (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (1)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.envFrom[].secretRef.name (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.image.repository (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.image.tag (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.custom (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.enabled (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.failureThreshold (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.httpGet.path (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.httpGet.port (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.initialDelaySeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.periodSeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.liveness.spec.timeoutSeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.custom (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.enabled (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.failureThreshold (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.httpGet.path (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.httpGet.port (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.initialDelaySeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.periodSeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.probes.readiness.spec.timeoutSeconds (2)
number
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.resources.limits.memory (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.resources.limits.cpu (1)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.resources.requests.cpu (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.allowPrivilegeEscalation (2)
boolean
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.capabilities.drop[] (2)
string
controllers.cloudflare-tunnel.containers.cloudflare-tunnel.securityContext.readOnlyRootFilesystem (2)
boolean
controllers.cloudflare-tunnel.replicas (27)
2
number, string
controllers.cloudflare-tunnel.pod.securityContext.runAsGroup (1)
number
controllers.cloudflare-tunnel.pod.securityContext.runAsNonRoot (1)
boolean
controllers.cloudflare-tunnel.pod.securityContext.runAsUser (1)
number
controllers.cloudflare-tunnel.type (1)
string
controllers.main.containers.app.args[] (2)
string
controllers.main.containers.app.env.NO_AUTOUPDATE (2)
boolean
controllers.main.containers.app.env.TUNNEL_METRICS (2)
string
controllers.main.containers.app.env.TUNNEL_POST_QUANTUM (2)
boolean
controllers.main.containers.app.env.TUNNEL_TRANSPORT_PROTOCOL (2)
string
controllers.main.containers.app.envFrom[].secretRef.name (2)
string
controllers.main.containers.app.image.repository (2)
string
controllers.main.containers.app.image.tag (2)
string
controllers.main.containers.app.probes.liveness.custom (2)
boolean
controllers.main.containers.app.probes.liveness.enabled (2)
boolean
controllers.main.containers.app.probes.liveness.spec.failureThreshold (2)
number
controllers.main.containers.app.probes.liveness.spec.httpGet.path (2)
string
controllers.main.containers.app.probes.liveness.spec.httpGet.port (2)
number
controllers.main.containers.app.probes.liveness.spec.initialDelaySeconds (2)
number
controllers.main.containers.app.probes.liveness.spec.periodSeconds (2)
number
controllers.main.containers.app.probes.liveness.spec.timeoutSeconds (2)
number
controllers.main.containers.app.probes.readiness.custom (2)
boolean
controllers.main.containers.app.probes.readiness.enabled (2)
boolean
controllers.main.containers.app.probes.readiness.spec.failureThreshold (2)
number
controllers.main.containers.app.probes.readiness.spec.httpGet.path (2)
string
controllers.main.containers.app.probes.readiness.spec.httpGet.port (2)
number
controllers.main.containers.app.probes.readiness.spec.initialDelaySeconds (2)
number
controllers.main.containers.app.probes.readiness.spec.periodSeconds (2)
number
controllers.main.containers.app.probes.readiness.spec.timeoutSeconds (2)
number
controllers.main.containers.app.resources.limits.memory (2)
string
controllers.main.containers.app.resources.requests.cpu (2)
string
controllers.main.containers.app.securityContext.allowPrivilegeEscalation (2)
boolean
controllers.main.containers.app.securityContext.capabilities.drop[] (2)
string
controllers.main.containers.app.securityContext.readOnlyRootFilesystem (2)
boolean
controllers.main.replicas (2)
number
controllers.main.strategy (2)
string
controllers.cloudflared.annotations."reloader.stakater.com/auto" (1)
string
controllers.cloudflared.containers.app.args[] (1)
string
controllers.cloudflared.containers.app.env.NO_AUTOUPDATE (1)
boolean
controllers.cloudflared.containers.app.env.TUNNEL_CRED_FILE (1)
string
controllers.cloudflared.containers.app.env.TUNNEL_ID (1)
string
controllers.cloudflared.containers.app.env.TUNNEL_METRICS (1)
string
controllers.cloudflared.containers.app.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (1)
boolean
controllers.cloudflared.containers.app.env.TUNNEL_POST_QUANTUM (1)
boolean
controllers.cloudflared.containers.app.env.TUNNEL_TRANSPORT_PROTOCOL (1)
string
controllers.cloudflared.containers.app.image.repository (1)
string
controllers.cloudflared.containers.app.image.tag (1)
string
controllers.cloudflared.containers.app.probes.liveness.custom (1)
boolean
controllers.cloudflared.containers.app.probes.liveness.enabled (1)
boolean
controllers.cloudflared.containers.app.probes.liveness.spec.failureThreshold (1)
number
controllers.cloudflared.containers.app.probes.liveness.spec.httpGet.path (1)
string
controllers.cloudflared.containers.app.probes.liveness.spec.httpGet.port (1)
number
controllers.cloudflared.containers.app.probes.liveness.spec.initialDelaySeconds (1)
number
controllers.cloudflared.containers.app.probes.liveness.spec.periodSeconds (1)
number
controllers.cloudflared.containers.app.probes.liveness.spec.timeoutSeconds (1)
number
controllers.cloudflared.containers.app.probes.readiness.custom (1)
boolean
controllers.cloudflared.containers.app.probes.readiness.enabled (1)
boolean
controllers.cloudflared.containers.app.probes.readiness.spec.failureThreshold (1)
number
controllers.cloudflared.containers.app.probes.readiness.spec.httpGet.path (1)
string
controllers.cloudflared.containers.app.probes.readiness.spec.httpGet.port (1)
number
controllers.cloudflared.containers.app.probes.readiness.spec.initialDelaySeconds (1)
number
controllers.cloudflared.containers.app.probes.readiness.spec.periodSeconds (1)
number
controllers.cloudflared.containers.app.probes.readiness.spec.timeoutSeconds (1)
number
controllers.cloudflared.containers.app.resources.limits.memory (1)
string
controllers.cloudflared.containers.app.resources.requests.cpu (1)
string
controllers.cloudflared.containers.app.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.cloudflared.containers.app.securityContext.capabilities.drop[] (1)
string
controllers.cloudflared.containers.app.securityContext.readOnlyRootFilesystem (1)
boolean
controllers.cloudflared.replicas (1)
number
controllers.cloudflared.strategy (1)
string
persistence.config-file.globalMounts[].path (48)
/etc/cloudflared/config.yaml
string
persistence.config-file.globalMounts[].subPath (48)
config.yaml
string
persistence.config-file.globalMounts[].readOnly (21)
true
boolean
persistence.config-file.type (48)
configMap
string
persistence.config-file.identifier (28)
config
string
persistence.config-file.name (20)
cloudflare-tunnel-configmap
string
persistence.config.globalMounts[].path (8)
/etc/cloudflared/config/config.yaml
string
persistence.config.globalMounts[].subPath (8)
config.yaml
string
persistence.config.globalMounts[].readOnly (5)
true
boolean
persistence.config.type (8)
configMap
string
persistence.config.name (6)
cloudflare-tunnel-configmap
string
persistence.config.identifier (2)
string
persistence.config.enabled (1)
boolean
persistence.creds.globalMounts[].path (5)
/etc/cloudflared/creds/credentials.json
string
persistence.creds.globalMounts[].readOnly (5)
true
boolean
persistence.creds.globalMounts[].subPath (5)
credentials.json
string
persistence.creds.name (5)
cloudflare-tunnel-secret
string
persistence.creds.type (5)
secret
string
persistence.homelab-ca.globalMounts[].path (2)
string
persistence.homelab-ca.globalMounts[].subPath (2)
string
persistence.homelab-ca.name (2)
string
persistence.homelab-ca.type (2)
string
persistence.credentials.globalMounts[].path (1)
string
persistence.credentials.globalMounts[].subPath (1)
string
persistence.credentials.name (1)
string
persistence.credentials.type (1)
string
configMaps.config.data."config.yaml" (30)
ingress: - hostname: "*.${SECRET_DOMAIN}" originRequest: http2Origin: true originServerName: external.${SECRET_DOMAIN} service: https://envoy-external.{{ .Release.Namespace }}.svc.cluster.local:443 - service: http_status:404
string