cloudflared helm release

cloudflared helm

Cloudflared is a lightweight proxy client for securely connecting applications to Cloudflare’s network. It powers Cloudflare Tunnel, allowing services to be exposed without opening ports or configuring firewall rules. cloudflared routes traffic through Cloudflare’s global network, enhancing security with DDoS protection, authentication, and encrypted connections. It supports HTTP, TCP, and QUIC, making it ideal for self-hosted services, remote access, and zero-trust networking.

More popular helm chart found

cloudflared from bjw-s/helm/ is more popular with 63 repositories.

Install

Install with:

helm repo add app-template oci://ghcr.io/bjw-s-labs/helm/app-template
helm install cloudflared app-template/app-template -f values.yaml

Examples

See examples from other people.

Major version:

Filter repos who also have:

Top Repositories (5 out of 47)

Name	Repo	Stars	Version	Timestamp
cloudflared	auricom/home-ops	192	3.7.3	a day ago
cloudflared	haraldkoch/kochhaus-home	142	4.1.2	3 days ago
cloudflared	cbirkenbeul/homelab	35	4.1.2	3 days ago
cloudflared	larivierec/home-cluster	121	4.1.2	3 days ago
cloudflared	ahgraber/homelab-gitops-k3s	90	4.1.1	5 days ago

Name

Repo

Stars

Version

Timestamp

cloudflared

auricom/home-ops

192

3.7.3

a day ago

cloudflared

haraldkoch/kochhaus-home

142

4.1.2

3 days ago

cloudflared

cbirkenbeul/homelab

4.1.2

3 days ago

cloudflared

larivierec/home-cluster

121

4.1.2

3 days ago

cloudflared

ahgraber/homelab-gitops-k3s

4.1.1

5 days ago

Values

See the most popular values for this chart:

Key	Types
controllers.cloudflared.strategy (43) `RollingUpdate`	string
controllers.cloudflared.containers.app.args[] (42) `- tunnel - run`	string
controllers.cloudflared.containers.app.image.repository (42) `docker.io/cloudflare/cloudflared`	string
controllers.cloudflared.containers.app.image.tag (42) `2025.6.1`	string
controllers.cloudflared.containers.app.probes.liveness.custom (42) `true`	boolean
controllers.cloudflared.containers.app.probes.liveness.enabled (42) `true`	boolean
controllers.cloudflared.containers.app.probes.liveness.spec.failureThreshold (42) `3`	number
controllers.cloudflared.containers.app.probes.liveness.spec.httpGet.path (42) `/ready`	string
controllers.cloudflared.containers.app.probes.liveness.spec.httpGet.port (42) `8080`	number
controllers.cloudflared.containers.app.probes.liveness.spec.periodSeconds (42) `10`	number
controllers.cloudflared.containers.app.probes.liveness.spec.timeoutSeconds (42) `1`	number
controllers.cloudflared.containers.app.probes.liveness.spec.initialDelaySeconds (41) `0`	number
controllers.cloudflared.containers.app.probes.readiness.custom (42) `true`	boolean
controllers.cloudflared.containers.app.probes.readiness.enabled (42) `true`	boolean
controllers.cloudflared.containers.app.probes.readiness.spec.failureThreshold (42) `3`	number
controllers.cloudflared.containers.app.probes.readiness.spec.httpGet.path (42) `/ready`	string
controllers.cloudflared.containers.app.probes.readiness.spec.httpGet.port (42) `8080`	number
controllers.cloudflared.containers.app.probes.readiness.spec.periodSeconds (42) `10`	number
controllers.cloudflared.containers.app.probes.readiness.spec.timeoutSeconds (42) `1`	number
controllers.cloudflared.containers.app.probes.readiness.spec.initialDelaySeconds (41) `0`	number
controllers.cloudflared.containers.app.probes.startup.enabled (9) `true`	boolean
controllers.cloudflared.containers.app.probes.startup.custom (7) `true`	boolean
controllers.cloudflared.containers.app.probes.startup.spec.failureThreshold (7) `30`	number
controllers.cloudflared.containers.app.probes.startup.spec.httpGet.path (7) `/ready`	string
controllers.cloudflared.containers.app.probes.startup.spec.httpGet.port (7) `8080`	number
controllers.cloudflared.containers.app.probes.startup.spec.periodSeconds (7) `10`	number
controllers.cloudflared.containers.app.probes.startup.spec.initialDelaySeconds (1)	number
controllers.cloudflared.containers.app.probes.startup.spec.timeoutSeconds (1)	number
controllers.cloudflared.containers.app.env.NO_AUTOUPDATE (41) `true`	boolean, string
controllers.cloudflared.containers.app.env.TUNNEL_METRICS (41) `0.0.0.0:8080`	string
controllers.cloudflared.containers.app.env.TUNNEL_TRANSPORT_PROTOCOL (39) `quic`	string
controllers.cloudflared.containers.app.env.TUNNEL_POST_QUANTUM (37) `true`	boolean
controllers.cloudflared.containers.app.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (36) `true`	boolean
controllers.cloudflared.containers.app.env.TUNNEL_CRED_FILE (21) `/etc/cloudflared/creds/credentials.json`	string
controllers.cloudflared.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.key (10) `TUNNEL_ID`	string
controllers.cloudflared.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.name (10) `cloudflared-secret`	string
controllers.cloudflared.containers.app.env.TUNNEL_ID (1)	string
controllers.cloudflared.containers.app.env.TUNNEL_MANAGEMENT_DIAGNOSTICS (3) `false`	boolean
controllers.cloudflared.containers.app.env.TUNNEL_EDGE_IP_VERSION (2)	string, number
controllers.cloudflared.containers.app.env.TUNNEL_LOGLEVEL (1)	string
controllers.cloudflared.containers.app.env.TUNNEL_REGION (1)	string
controllers.cloudflared.containers.app.env.TZ (1)	string
controllers.cloudflared.containers.app.resources.limits.memory (41) `256Mi`	string
controllers.cloudflared.containers.app.resources.requests.cpu (41) `10m`	string
controllers.cloudflared.containers.app.resources.requests.memory (10)	string
controllers.cloudflared.containers.app.securityContext.allowPrivilegeEscalation (37) `false`	boolean
controllers.cloudflared.containers.app.securityContext.capabilities.drop[] (37) `- ALL`	string
controllers.cloudflared.containers.app.securityContext.readOnlyRootFilesystem (37) `true`	boolean
controllers.cloudflared.containers.app.envFrom[].secretRef.name (20) `cloudflared-secret`	string
controllers.cloudflared.containers.app.env[].name (1)	string
controllers.cloudflared.containers.app.env[].value (1)	string
controllers.cloudflared.containers.app.env[].valueFrom.secretKeyRef.key (1)	string
controllers.cloudflared.containers.app.env[].valueFrom.secretKeyRef.name (1)	string
controllers.cloudflared.containers.cloudflared.args[] (1)	string
controllers.cloudflared.containers.cloudflared.env.NO_AUTOUPDATE (1)	boolean
controllers.cloudflared.containers.cloudflared.env.TUNNEL_CRED_FILE (1)	string
controllers.cloudflared.containers.cloudflared.env.TUNNEL_ID.valueFrom.secretKeyRef.key (1)	string
controllers.cloudflared.containers.cloudflared.env.TUNNEL_ID.valueFrom.secretKeyRef.name (1)	string
controllers.cloudflared.containers.cloudflared.env.TUNNEL_METRICS (1)	string
controllers.cloudflared.containers.cloudflared.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (1)	boolean
controllers.cloudflared.containers.cloudflared.env.TUNNEL_POST_QUANTUM (1)	boolean
controllers.cloudflared.containers.cloudflared.env.TUNNEL_TOKEN.valueFrom.secretKeyRef.key (1)	string
controllers.cloudflared.containers.cloudflared.env.TUNNEL_TOKEN.valueFrom.secretKeyRef.name (1)	string
controllers.cloudflared.containers.cloudflared.env.TUNNEL_TRANSPORT_PROTOCOL (1)	string
controllers.cloudflared.containers.cloudflared.image.repository (1)	string
controllers.cloudflared.containers.cloudflared.image.tag (1)	string
controllers.cloudflared.containers.cloudflared.probes.liveness.custom (1)	boolean
controllers.cloudflared.containers.cloudflared.probes.liveness.enabled (1)	boolean
controllers.cloudflared.containers.cloudflared.probes.liveness.spec.httpGet.path (1)	string
controllers.cloudflared.containers.cloudflared.probes.liveness.spec.httpGet.port (1)	number
controllers.cloudflared.containers.cloudflared.probes.readiness.custom (1)	boolean
controllers.cloudflared.containers.cloudflared.probes.readiness.enabled (1)	boolean
controllers.cloudflared.containers.cloudflared.probes.readiness.spec.httpGet.path (1)	string
controllers.cloudflared.containers.cloudflared.probes.readiness.spec.httpGet.port (1)	number
controllers.cloudflared.containers.cloudflared.securityContext.allowPrivilegeEscalation (1)	boolean
controllers.cloudflared.containers.cloudflared.securityContext.capabilities.drop[] (1)	string
controllers.cloudflared.containers.cloudflared.securityContext.readOnlyRootFilesystem (1)	boolean
controllers.cloudflared.containers.main.args[] (1)	string
controllers.cloudflared.containers.main.env.NO_AUTOUPDATE (1)	string
controllers.cloudflared.containers.main.env.TUNNEL_CRED_FILE (1)	string
controllers.cloudflared.containers.main.env.TUNNEL_METRICS (1)	string
controllers.cloudflared.containers.main.env.TUNNEL_TRANSPORT_PROTOCOL (1)	string
controllers.cloudflared.containers.main.image.repository (1)	string
controllers.cloudflared.containers.main.image.tag (1)	string
controllers.cloudflared.containers.main.probes.liveness.enabled (1)	boolean
controllers.cloudflared.containers.main.probes.readiness.enabled (1)	boolean
controllers.cloudflared.containers.main.probes.startup.enabled (1)	boolean
controllers.cloudflared.containers.main.probes.startup.spec.failureThreshold (1)	number
controllers.cloudflared.containers.main.probes.startup.spec.periodSeconds (1)	number
controllers.cloudflared.containers.main.resources.limits.memory (1)	string
controllers.cloudflared.containers.main.resources.requests.cpu (1)	string
controllers.cloudflared.containers.main.resources.requests.memory (1)	string
controllers.cloudflared.annotations."reloader.stakater.com/auto" (38) `true`	string
controllers.cloudflared.annotations."configmap.reloader.stakater.com/reload" (3)	string
controllers.cloudflared.annotations."secret.reloader.stakater.com/reload" (3)	string
controllers.cloudflared.replicas (30) `2`	number
controllers.cloudflared.pod.securityContext.runAsGroup (10) `2000`	number
controllers.cloudflared.pod.securityContext.runAsUser (10) `2000`	number
controllers.cloudflared.pod.securityContext.runAsNonRoot (9) `true`	boolean
controllers.cloudflared.pod.securityContext.fsGroup (2)	number
controllers.cloudflared.pod.securityContext.fsGroupChangePolicy (2)	string
controllers.cloudflared.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (7) `cloudflared`	string
controllers.cloudflared.pod.topologySpreadConstraints[].maxSkew (7) `1`	number
controllers.cloudflared.pod.topologySpreadConstraints[].topologyKey (7) `kubernetes.io/hostname`	string
controllers.cloudflared.pod.topologySpreadConstraints[].whenUnsatisfiable (7) `DoNotSchedule`	string
controllers.cloudflared.pod.labels."egress.home.arpa/internet" (2)	string
controllers.cloudflared.pod.labels."egress.home.arpa/kubedns" (2)	string
controllers.cloudflared.pod.labels."ingress.home.arpa/nginx-external" (2)	string
controllers.cloudflared.defaultContainerOptions.securityContext.allowPrivilegeEscalation (2)	boolean
controllers.cloudflared.defaultContainerOptions.securityContext.capabilities.drop[] (2)	string
controllers.cloudflared.defaultContainerOptions.securityContext.readOnlyRootFilesystem (2)	boolean
controllers.main.annotations."reloader.stakater.com/auto" (2)	string
controllers.main.containers.main.args[] (2)	string
controllers.main.containers.main.env.NO_AUTOUPDATE (2)	boolean
controllers.main.containers.main.env.TUNNEL_CRED_FILE (2)	string
controllers.main.containers.main.env.TUNNEL_ID.valueFrom.secretKeyRef.key (2)	string
controllers.main.containers.main.env.TUNNEL_ID.valueFrom.secretKeyRef.name (2)	string
controllers.main.containers.main.env.TUNNEL_METRICS (2)	string
controllers.main.containers.main.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (2)	boolean
controllers.main.containers.main.env.TUNNEL_POST_QUANTUM (2)	boolean
controllers.main.containers.main.env.TUNNEL_TRANSPORT_PROTOCOL (2)	string
controllers.main.containers.main.image.repository (2)	string
controllers.main.containers.main.image.tag (2)	string
controllers.main.containers.main.probes.liveness.custom (2)	boolean
controllers.main.containers.main.probes.liveness.enabled (2)	boolean
controllers.main.containers.main.probes.liveness.spec.failureThreshold (2)	number
controllers.main.containers.main.probes.liveness.spec.httpGet.path (2)	string
controllers.main.containers.main.probes.liveness.spec.httpGet.port (2)	number
controllers.main.containers.main.probes.liveness.spec.initialDelaySeconds (2)	number
controllers.main.containers.main.probes.liveness.spec.periodSeconds (2)	number
controllers.main.containers.main.probes.liveness.spec.timeoutSeconds (2)	number
controllers.main.containers.main.probes.readiness.custom (2)	boolean
controllers.main.containers.main.probes.readiness.enabled (2)	boolean
controllers.main.containers.main.probes.readiness.spec.failureThreshold (2)	number
controllers.main.containers.main.probes.readiness.spec.httpGet.path (2)	string
controllers.main.containers.main.probes.readiness.spec.httpGet.port (2)	number
controllers.main.containers.main.probes.readiness.spec.initialDelaySeconds (2)	number
controllers.main.containers.main.probes.readiness.spec.periodSeconds (2)	number
controllers.main.containers.main.probes.readiness.spec.timeoutSeconds (2)	number
controllers.main.containers.main.probes.startup.enabled (2)	boolean
controllers.main.containers.main.resources.limits.memory (2)	string
controllers.main.containers.main.resources.requests.cpu (2)	string
controllers.main.containers.main.securityContext.allowPrivilegeEscalation (2)	boolean
controllers.main.containers.main.securityContext.capabilities.drop[] (2)	string
controllers.main.containers.main.securityContext.readOnlyRootFilesystem (2)	boolean
controllers.main.pod.securityContext.runAsGroup (2)	number
controllers.main.pod.securityContext.runAsNonRoot (2)	boolean
controllers.main.pod.securityContext.runAsUser (2)	number
controllers.main.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (2)	string
controllers.main.pod.topologySpreadConstraints[].maxSkew (2)	number
controllers.main.pod.topologySpreadConstraints[].topologyKey (2)	string
controllers.main.pod.topologySpreadConstraints[].whenUnsatisfiable (2)	string
controllers.main.replicas (2)	number
controllers.main.strategy (2)	string
controllers.cloudflare-tunnel.annotations."reloader.stakater.com/auto" (1)	string
controllers.cloudflare-tunnel.containers.app.args[] (1)	string
controllers.cloudflare-tunnel.containers.app.env.NO_AUTOUPDATE (1)	string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_METRICS (1)	string
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (1)	boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_POST_QUANTUM (1)	boolean
controllers.cloudflare-tunnel.containers.app.env.TUNNEL_TRANSPORT_PROTOCOL (1)	string
controllers.cloudflare-tunnel.containers.app.envFrom[].secretRef.name (1)	string
controllers.cloudflare-tunnel.containers.app.image.repository (1)	string
controllers.cloudflare-tunnel.containers.app.image.tag (1)	string
controllers.cloudflare-tunnel.containers.app.probes.liveness.custom (1)	boolean
controllers.cloudflare-tunnel.containers.app.probes.liveness.enabled (1)	boolean
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.failureThreshold (1)	number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.path (1)	string
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.httpGet.port (1)	number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.initialDelaySeconds (1)	number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.periodSeconds (1)	number
controllers.cloudflare-tunnel.containers.app.probes.liveness.spec.timeoutSeconds (1)	number
controllers.cloudflare-tunnel.containers.app.probes.readiness.custom (1)	boolean
controllers.cloudflare-tunnel.containers.app.probes.readiness.enabled (1)	boolean
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.failureThreshold (1)	number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.path (1)	string
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.httpGet.port (1)	number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.initialDelaySeconds (1)	number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.periodSeconds (1)	number
controllers.cloudflare-tunnel.containers.app.probes.readiness.spec.timeoutSeconds (1)	number
controllers.cloudflare-tunnel.containers.app.resources.limits.memory (1)	string
controllers.cloudflare-tunnel.containers.app.resources.requests.cpu (1)	string
controllers.cloudflare-tunnel.containers.app.securityContext.allowPrivilegeEscalation (1)	boolean
controllers.cloudflare-tunnel.containers.app.securityContext.capabilities.drop[] (1)	string
controllers.cloudflare-tunnel.containers.app.securityContext.readOnlyRootFilesystem (1)	boolean
controllers.cloudflare-tunnel.replicas (1)	number
controllers.cloudflare-tunnel.strategy (1)	string
persistence.config.globalMounts[].path (43) `/etc/cloudflared/config/config.yaml`	string
persistence.config.globalMounts[].subPath (43) `config.yaml`	string
persistence.config.globalMounts[].readOnly (42) `true`	boolean
persistence.config.name (43) `cloudflared-configmap`	string
persistence.config.type (43) `configMap`	string
persistence.config.enabled (6) `true`	boolean
persistence.creds.globalMounts[].path (25) `/etc/cloudflared/creds/credentials.json`	string
persistence.creds.globalMounts[].subPath (25) `credentials.json`	string
persistence.creds.globalMounts[].readOnly (24) `true`	boolean
persistence.creds.name (25) `cloudflared-secret`	string
persistence.creds.type (25) `secret`	string
persistence.creds.enabled (4) `true`	boolean
persistence.config-file.globalMounts[].path (2)	string
persistence.config-file.globalMounts[].readOnly (2)	boolean
persistence.config-file.globalMounts[].subPath (2)	string
persistence.config-file.name (2)	string
persistence.config-file.type (2)	string
persistence.secret-file.globalMounts[].path (1)	string
persistence.secret-file.globalMounts[].readOnly (1)	boolean
persistence.secret-file.globalMounts[].subPath (1)	string
persistence.secret-file.name (1)	string
persistence.secret-file.type (1)	string
service.app.ports.http.port (42) `8080`	number
service.app.controller (29) `cloudflared`	string
service.app.ipFamilyPolicy (1)	string
service.main.controller (4)	string
service.main.ports.http.port (4) `8080`	number
service.cloudflared.controller (1)	string
service.cloudflared.ports.http.port (1)	number
serviceMonitor.app.endpoints[].port (42) `http`	string
serviceMonitor.app.endpoints[].interval (33) `1m`	string
serviceMonitor.app.endpoints[].path (33) `/metrics`	string
serviceMonitor.app.endpoints[].scheme (33) `http`	string
serviceMonitor.app.endpoints[].scrapeTimeout (33) `10s`	string
serviceMonitor.app.serviceName (31) `cloudflared`	string
serviceMonitor.app.enabled (1)	boolean
serviceMonitor.main.endpoints[].interval (3) `1m`	string
serviceMonitor.main.endpoints[].path (3) `/metrics`	string
serviceMonitor.main.endpoints[].port (3) `http`	string
serviceMonitor.main.endpoints[].scheme (3) `http`	string
serviceMonitor.main.endpoints[].scrapeTimeout (3) `30s`	string
serviceMonitor.main.serviceName (3) `cloudflared`	string
serviceMonitor.main.enabled (1)	boolean
serviceMonitor.cloudflared.endpoints[].port (2)	string
serviceMonitor.cloudflared.endpoints[].interval (1)	string
serviceMonitor.cloudflared.endpoints[].metricRelabelings[].action (1)	string
serviceMonitor.cloudflared.endpoints[].metricRelabelings[].regex (1)	string
serviceMonitor.cloudflared.endpoints[].path (1)	string
serviceMonitor.cloudflared.endpoints[].scheme (1)	string
serviceMonitor.cloudflared.endpoints[].scrapeTimeout (1)	string
serviceMonitor.cloudflared.serviceName (2)	string
serviceMonitor.cloudflared.enabled (1)	boolean
defaultPodOptions.securityContext.runAsGroup (31) `65534`	number
defaultPodOptions.securityContext.runAsNonRoot (31) `true`	boolean
defaultPodOptions.securityContext.runAsUser (31) `65534`	number
defaultPodOptions.securityContext.seccompProfile.type (22) `RuntimeDefault`	string
defaultPodOptions.securityContext.fsGroup (2)	number
defaultPodOptions.securityContext.fsGroupChangePolicy (2)	string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (4) `cloudflared`	string
defaultPodOptions.topologySpreadConstraints[].maxSkew (4) `1`	number
defaultPodOptions.topologySpreadConstraints[].topologyKey (4) `kubernetes.io/hostname`	string
defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (4) `DoNotSchedule`	string
defaultPodOptions.automountServiceAccountToken (2)	boolean
defaultPodOptions.tolerations[].effect (1)	string
defaultPodOptions.tolerations[].key (1)	string
defaultPodOptions.tolerations[].operator (1)	string

Key

Types

controllers.cloudflared.strategy (43)