cloudflared helm release

cloudflared helm

Cloudflared is a lightweight proxy client for securely connecting applications to Cloudflare’s network. It powers Cloudflare Tunnel, allowing services to be exposed without opening ports or configuring firewall rules. cloudflared routes traffic through Cloudflare’s global network, enhancing security with DDoS protection, authentication, and encrypted connections. It supports HTTP, TCP, and QUIC, making it ideal for self-hosted services, remote access, and zero-trust networking.

More popular helm chart found

cloudflared from bjw-s/helm/ is more popular with 70 repositories.

Install

Install with:

helm repo add app-template oci://ghcr.io/bjw-s-labs/helm/app-template
helm install cloudflared app-template/app-template -f values.yaml

Examples

See examples from other people.

Major version:

Filter repos who also have:

Top Repositories (5 out of 38)

Name	Repo	Stars	Version	Timestamp
cloudflared	budimanjojo/home-cluster	195	3.7.3	4 hours ago
cloudflared	bjw-s-labs/home-ops	675	3.7.3	6 hours ago
cloudflared	bjw-s/home-ops	395	3.7.3	6 hours ago
cloudflared	larivierec/home-cluster	115	3.7.3	6 hours ago
cloudflared	buroa/k8s-gitops	265	3.7.3	6 hours ago

Name

Repo

Stars

Version

Timestamp

cloudflared

budimanjojo/home-cluster

195

3.7.3

4 hours ago

cloudflared

bjw-s-labs/home-ops

675

3.7.3

6 hours ago

cloudflared

bjw-s/home-ops

395

3.7.3

6 hours ago

cloudflared

larivierec/home-cluster

115

3.7.3

6 hours ago

cloudflared

buroa/k8s-gitops

265

3.7.3

6 hours ago

Values

See the most popular values for this chart:

Key	Types
persistence.config.globalMounts[].path (37) `/etc/cloudflared/config/config.yaml`	string
persistence.config.globalMounts[].subPath (37) `config.yaml`	string
persistence.config.globalMounts[].readOnly (36) `true`	boolean
persistence.config.name (37) `cloudflared-configmap`	string
persistence.config.type (37) `configMap`	string
persistence.config.enabled (6) `true`	boolean
persistence.creds.globalMounts[].path (22) `/etc/cloudflared/creds/credentials.json`	string
persistence.creds.globalMounts[].subPath (22) `credentials.json`	string
persistence.creds.globalMounts[].readOnly (21) `true`	boolean
persistence.creds.name (22) `cloudflared-secret`	string
persistence.creds.type (22) `secret`	string
persistence.creds.enabled (4) `true`	boolean
persistence.config-file.globalMounts[].path (1)	string
persistence.config-file.globalMounts[].readOnly (1)	boolean
persistence.config-file.globalMounts[].subPath (1)	string
persistence.config-file.name (1)	string
persistence.config-file.type (1)	string
persistence.secret-file.globalMounts[].path (1)	string
persistence.secret-file.globalMounts[].readOnly (1)	boolean
persistence.secret-file.globalMounts[].subPath (1)	string
persistence.secret-file.name (1)	string
persistence.secret-file.type (1)	string
controllers.cloudflared.strategy (35) `RollingUpdate`	string
controllers.cloudflared.annotations."reloader.stakater.com/auto" (34) `true`	string
controllers.cloudflared.annotations."configmap.reloader.stakater.com/reload" (1)	string
controllers.cloudflared.annotations."secret.reloader.stakater.com/reload" (1)	string
controllers.cloudflared.containers.app.args[] (34) `- tunnel - run`	string
controllers.cloudflared.containers.app.image.repository (34) `docker.io/cloudflare/cloudflared`	string
controllers.cloudflared.containers.app.image.tag (34) `2025.4.2`	string
controllers.cloudflared.containers.app.probes.liveness.custom (34) `true`	boolean
controllers.cloudflared.containers.app.probes.liveness.enabled (34) `true`	boolean
controllers.cloudflared.containers.app.probes.liveness.spec.failureThreshold (34) `3`	number
controllers.cloudflared.containers.app.probes.liveness.spec.httpGet.path (34) `/ready`	string
controllers.cloudflared.containers.app.probes.liveness.spec.httpGet.port (34) `8080`	number
controllers.cloudflared.containers.app.probes.liveness.spec.initialDelaySeconds (34) `0`	number
controllers.cloudflared.containers.app.probes.liveness.spec.periodSeconds (34) `10`	number
controllers.cloudflared.containers.app.probes.liveness.spec.timeoutSeconds (34) `1`	number
controllers.cloudflared.containers.app.probes.readiness.custom (34) `true`	boolean
controllers.cloudflared.containers.app.probes.readiness.enabled (34) `true`	boolean
controllers.cloudflared.containers.app.probes.readiness.spec.failureThreshold (34) `3`	number
controllers.cloudflared.containers.app.probes.readiness.spec.httpGet.path (34) `/ready`	string
controllers.cloudflared.containers.app.probes.readiness.spec.httpGet.port (34) `8080`	number
controllers.cloudflared.containers.app.probes.readiness.spec.initialDelaySeconds (34) `0`	number
controllers.cloudflared.containers.app.probes.readiness.spec.periodSeconds (34) `10`	number
controllers.cloudflared.containers.app.probes.readiness.spec.timeoutSeconds (34) `1`	number
controllers.cloudflared.containers.app.probes.startup.enabled (7) `true`	boolean
controllers.cloudflared.containers.app.probes.startup.custom (6) `true`	boolean
controllers.cloudflared.containers.app.probes.startup.spec.failureThreshold (6) `30`	number
controllers.cloudflared.containers.app.probes.startup.spec.httpGet.path (6) `/ready`	string
controllers.cloudflared.containers.app.probes.startup.spec.httpGet.port (6) `8080`	number
controllers.cloudflared.containers.app.probes.startup.spec.periodSeconds (6) `10`	number
controllers.cloudflared.containers.app.probes.startup.spec.initialDelaySeconds (1)	number
controllers.cloudflared.containers.app.probes.startup.spec.timeoutSeconds (1)	number
controllers.cloudflared.containers.app.env.NO_AUTOUPDATE (33) `true`	boolean, string
controllers.cloudflared.containers.app.env.TUNNEL_METRICS (33) `0.0.0.0:8080`	string
controllers.cloudflared.containers.app.env.TUNNEL_TRANSPORT_PROTOCOL (33) `quic`	string
controllers.cloudflared.containers.app.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (32) `true`	boolean
controllers.cloudflared.containers.app.env.TUNNEL_POST_QUANTUM (32) `true`	boolean
controllers.cloudflared.containers.app.env.TUNNEL_CRED_FILE (19) `/etc/cloudflared/creds/credentials.json`	string
controllers.cloudflared.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.key (7) `TUNNEL_ID`	string
controllers.cloudflared.containers.app.env.TUNNEL_ID.valueFrom.secretKeyRef.name (7) `cloudflared-secret`	string
controllers.cloudflared.containers.app.env.TUNNEL_ID (1)	string
controllers.cloudflared.containers.app.env.TUNNEL_EDGE_IP_VERSION (2)	string, number
controllers.cloudflared.containers.app.env.TUNNEL_MANAGEMENT_DIAGNOSTICS (1)	boolean
controllers.cloudflared.containers.app.env.TUNNEL_REGION (1)	string
controllers.cloudflared.containers.app.resources.limits.memory (33) `256Mi`	string
controllers.cloudflared.containers.app.resources.requests.cpu (33) `10m`	string
controllers.cloudflared.containers.app.resources.requests.memory (8) `128Mi`	string
controllers.cloudflared.containers.app.securityContext.allowPrivilegeEscalation (30) `false`	boolean
controllers.cloudflared.containers.app.securityContext.capabilities.drop[] (30) `- ALL`	string
controllers.cloudflared.containers.app.securityContext.readOnlyRootFilesystem (30) `true`	boolean
controllers.cloudflared.containers.app.envFrom[].secretRef.name (15) `cloudflared-secret`	string
controllers.cloudflared.containers.app.env[].name (1)	string
controllers.cloudflared.containers.app.env[].value (1)	string
controllers.cloudflared.containers.app.env[].valueFrom.secretKeyRef.key (1)	string
controllers.cloudflared.containers.app.env[].valueFrom.secretKeyRef.name (1)	string
controllers.cloudflared.containers.cloudflared.args[] (1)	string
controllers.cloudflared.containers.cloudflared.env.NO_AUTOUPDATE (1)	boolean
controllers.cloudflared.containers.cloudflared.env.TUNNEL_CRED_FILE (1)	string
controllers.cloudflared.containers.cloudflared.env.TUNNEL_ID.valueFrom.secretKeyRef.key (1)	string
controllers.cloudflared.containers.cloudflared.env.TUNNEL_ID.valueFrom.secretKeyRef.name (1)	string
controllers.cloudflared.containers.cloudflared.env.TUNNEL_METRICS (1)	string
controllers.cloudflared.containers.cloudflared.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (1)	boolean
controllers.cloudflared.containers.cloudflared.env.TUNNEL_POST_QUANTUM (1)	boolean
controllers.cloudflared.containers.cloudflared.env.TUNNEL_TOKEN.valueFrom.secretKeyRef.key (1)	string
controllers.cloudflared.containers.cloudflared.env.TUNNEL_TOKEN.valueFrom.secretKeyRef.name (1)	string
controllers.cloudflared.containers.cloudflared.env.TUNNEL_TRANSPORT_PROTOCOL (1)	string
controllers.cloudflared.containers.cloudflared.image.repository (1)	string
controllers.cloudflared.containers.cloudflared.image.tag (1)	string
controllers.cloudflared.containers.cloudflared.probes.liveness.custom (1)	boolean
controllers.cloudflared.containers.cloudflared.probes.liveness.enabled (1)	boolean
controllers.cloudflared.containers.cloudflared.probes.liveness.spec.httpGet.path (1)	string
controllers.cloudflared.containers.cloudflared.probes.liveness.spec.httpGet.port (1)	number
controllers.cloudflared.containers.cloudflared.probes.readiness.custom (1)	boolean
controllers.cloudflared.containers.cloudflared.probes.readiness.enabled (1)	boolean
controllers.cloudflared.containers.cloudflared.probes.readiness.spec.httpGet.path (1)	string
controllers.cloudflared.containers.cloudflared.probes.readiness.spec.httpGet.port (1)	number
controllers.cloudflared.containers.cloudflared.securityContext.allowPrivilegeEscalation (1)	boolean
controllers.cloudflared.containers.cloudflared.securityContext.capabilities.drop[] (1)	string
controllers.cloudflared.containers.cloudflared.securityContext.readOnlyRootFilesystem (1)	boolean
controllers.cloudflared.containers.main.args[] (1)	string
controllers.cloudflared.containers.main.env.NO_AUTOUPDATE (1)	string
controllers.cloudflared.containers.main.env.TUNNEL_CRED_FILE (1)	string
controllers.cloudflared.containers.main.env.TUNNEL_METRICS (1)	string
controllers.cloudflared.containers.main.env.TUNNEL_TRANSPORT_PROTOCOL (1)	string
controllers.cloudflared.containers.main.image.repository (1)	string
controllers.cloudflared.containers.main.image.tag (1)	string
controllers.cloudflared.containers.main.probes.liveness.enabled (1)	boolean
controllers.cloudflared.containers.main.probes.readiness.enabled (1)	boolean
controllers.cloudflared.containers.main.probes.startup.enabled (1)	boolean
controllers.cloudflared.containers.main.probes.startup.spec.failureThreshold (1)	number
controllers.cloudflared.containers.main.probes.startup.spec.periodSeconds (1)	number
controllers.cloudflared.containers.main.resources.limits.memory (1)	string
controllers.cloudflared.containers.main.resources.requests.cpu (1)	string
controllers.cloudflared.containers.main.resources.requests.memory (1)	string
controllers.cloudflared.replicas (24) `2`	number
controllers.cloudflared.pod.securityContext.runAsGroup (7) `2000`	number
controllers.cloudflared.pod.securityContext.runAsNonRoot (7) `true`	boolean
controllers.cloudflared.pod.securityContext.runAsUser (7) `2000`	number
controllers.cloudflared.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (7) `cloudflared`	string
controllers.cloudflared.pod.topologySpreadConstraints[].maxSkew (7) `1`	number
controllers.cloudflared.pod.topologySpreadConstraints[].topologyKey (7) `kubernetes.io/hostname`	string
controllers.cloudflared.pod.topologySpreadConstraints[].whenUnsatisfiable (7) `DoNotSchedule`	string
controllers.cloudflared.pod.labels."egress.home.arpa/internet" (1)	string
controllers.cloudflared.pod.labels."egress.home.arpa/kubedns" (1)	string
controllers.cloudflared.pod.labels."ingress.home.arpa/nginx-external" (1)	string
controllers.main.annotations."reloader.stakater.com/auto" (2)	string
controllers.main.containers.main.args[] (2)	string
controllers.main.containers.main.env.NO_AUTOUPDATE (2)	boolean
controllers.main.containers.main.env.TUNNEL_CRED_FILE (2)	string
controllers.main.containers.main.env.TUNNEL_ID.valueFrom.secretKeyRef.key (2)	string
controllers.main.containers.main.env.TUNNEL_ID.valueFrom.secretKeyRef.name (2)	string
controllers.main.containers.main.env.TUNNEL_METRICS (2)	string
controllers.main.containers.main.env.TUNNEL_ORIGIN_ENABLE_HTTP2 (2)	boolean
controllers.main.containers.main.env.TUNNEL_POST_QUANTUM (2)	boolean
controllers.main.containers.main.env.TUNNEL_TRANSPORT_PROTOCOL (2)	string
controllers.main.containers.main.image.repository (2)	string
controllers.main.containers.main.image.tag (2)	string
controllers.main.containers.main.probes.liveness.custom (2)	boolean
controllers.main.containers.main.probes.liveness.enabled (2)	boolean
controllers.main.containers.main.probes.liveness.spec.failureThreshold (2)	number
controllers.main.containers.main.probes.liveness.spec.httpGet.path (2)	string
controllers.main.containers.main.probes.liveness.spec.httpGet.port (2)	number
controllers.main.containers.main.probes.liveness.spec.initialDelaySeconds (2)	number
controllers.main.containers.main.probes.liveness.spec.periodSeconds (2)	number
controllers.main.containers.main.probes.liveness.spec.timeoutSeconds (2)	number
controllers.main.containers.main.probes.readiness.custom (2)	boolean
controllers.main.containers.main.probes.readiness.enabled (2)	boolean
controllers.main.containers.main.probes.readiness.spec.failureThreshold (2)	number
controllers.main.containers.main.probes.readiness.spec.httpGet.path (2)	string
controllers.main.containers.main.probes.readiness.spec.httpGet.port (2)	number
controllers.main.containers.main.probes.readiness.spec.initialDelaySeconds (2)	number
controllers.main.containers.main.probes.readiness.spec.periodSeconds (2)	number
controllers.main.containers.main.probes.readiness.spec.timeoutSeconds (2)	number
controllers.main.containers.main.probes.startup.enabled (2)	boolean
controllers.main.containers.main.resources.limits.memory (2)	string
controllers.main.containers.main.resources.requests.cpu (2)	string
controllers.main.containers.main.securityContext.allowPrivilegeEscalation (2)	boolean
controllers.main.containers.main.securityContext.capabilities.drop[] (2)	string
controllers.main.containers.main.securityContext.readOnlyRootFilesystem (2)	boolean
controllers.main.pod.securityContext.runAsGroup (2)	number
controllers.main.pod.securityContext.runAsNonRoot (2)	boolean
controllers.main.pod.securityContext.runAsUser (2)	number
controllers.main.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (2)	string
controllers.main.pod.topologySpreadConstraints[].maxSkew (2)	number
controllers.main.pod.topologySpreadConstraints[].topologyKey (2)	string
controllers.main.pod.topologySpreadConstraints[].whenUnsatisfiable (2)	string
controllers.main.replicas (2)	number
controllers.main.strategy (2)	string
service.app.controller (33) `cloudflared`	string
service.app.ports.http.port (33) `8080`	number
service.app.ipFamilyPolicy (1)	string
service.main.controller (4)	string
service.main.ports.http.port (4) `8080`	number
service.cloudflared.controller (1)	string
service.cloudflared.ports.http.port (1)	number
serviceMonitor.app.endpoints[].port (33) `http`	string
serviceMonitor.app.endpoints[].interval (27) `1m`	string
serviceMonitor.app.endpoints[].path (27) `/metrics`	string
serviceMonitor.app.endpoints[].scheme (27) `http`	string
serviceMonitor.app.endpoints[].scrapeTimeout (27) `10s`	string
serviceMonitor.app.serviceName (33) `cloudflared`	string
serviceMonitor.app.enabled (2)	boolean
serviceMonitor.main.endpoints[].interval (3) `1m`	string
serviceMonitor.main.endpoints[].path (3) `/metrics`	string
serviceMonitor.main.endpoints[].port (3) `http`	string
serviceMonitor.main.endpoints[].scheme (3) `http`	string
serviceMonitor.main.endpoints[].scrapeTimeout (3) `30s`	string
serviceMonitor.main.serviceName (3) `cloudflared`	string
serviceMonitor.main.enabled (1)	boolean
serviceMonitor.cloudflared.endpoints[].port (2)	string
serviceMonitor.cloudflared.endpoints[].interval (1)	string
serviceMonitor.cloudflared.endpoints[].metricRelabelings[].action (1)	string
serviceMonitor.cloudflared.endpoints[].metricRelabelings[].regex (1)	string
serviceMonitor.cloudflared.endpoints[].path (1)	string
serviceMonitor.cloudflared.endpoints[].scheme (1)	string
serviceMonitor.cloudflared.endpoints[].scrapeTimeout (1)	string
serviceMonitor.cloudflared.serviceName (2)	string
serviceMonitor.cloudflared.enabled (1)	boolean
defaultPodOptions.securityContext.runAsGroup (24) `65534`	number
defaultPodOptions.securityContext.runAsNonRoot (24) `true`	boolean
defaultPodOptions.securityContext.runAsUser (24) `65534`	number
defaultPodOptions.securityContext.seccompProfile.type (17) `RuntimeDefault`	string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (3) `cloudflared`	string
defaultPodOptions.topologySpreadConstraints[].maxSkew (3) `1`	number
defaultPodOptions.topologySpreadConstraints[].topologyKey (3) `kubernetes.io/hostname`	string
defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (3) `DoNotSchedule`	string
defaultPodOptions.tolerations[].effect (1)	string
defaultPodOptions.tolerations[].key (1)	string
defaultPodOptions.tolerations[].operator (1)	string

Key

Types

persistence.config.globalMounts[].path (37)