Cloudflared is a lightweight proxy client for securely connecting applications to Cloudflare’s network. It powers Cloudflare Tunnel, allowing services to be exposed without opening ports or configuring firewall rules. cloudflared routes traffic through Cloudflare’s global network, enhancing security with DDoS protection, authentication, and encrypted connections. It supports HTTP, TCP, and QUIC, making it ideal for self-hosted services, remote access, and zero-trust networking.
Install with:
helm repo add app-template oci://ghcr.io/bjw-s-labs/helm/app-template
helm install cloudflared app-template/app-template -f values.yamlSee examples from other people.
| Name | Repo | Stars | Version | Timestamp |
|---|---|---|---|---|
| cloudflared | haraldkoch/kochhaus-home | 160 | 4.5.0 | 3 days ago |
| cloudflared | haraldkoch/kochhaus-home | 160 | 4.5.0 | 3 days ago |
| cloudflared | Pumba98/flux2-gitops | 68 | 4.5.0 | 5 days ago |
| cloudflared | larivierec/home-cluster | 137 | 4.5.0 | 5 days ago |
| cloudflared | buroa/k8s-gitops | 326 | 4.5.0 | 22 days ago |
See the most popular values for this chart:
| Key | Types |
|---|---|
persistence.config.globalMounts[].path (53) /etc/cloudflared/config/config.yaml | string |
| string | |
| boolean | |
persistence.config.type (53) configMap | string |
persistence.config.name (45) cloudflared-configmap | string |
| boolean | |
| string | |
persistence.creds.globalMounts[].path (30) /etc/cloudflared/creds/credentials.json | string |
| boolean | |
persistence.creds.globalMounts[].subPath (30) credentials.json | string |
persistence.creds.name (30) cloudflared-secret | string |
| string | |
| boolean | |
persistence.config-file.globalMounts[].path (4) /etc/cloudflared/config.yaml | string |
| string | |
| boolean | |
persistence.config-file.type (4) configMap | string |
| string | |
| string | |
| string | |
| boolean | |
| string | |
| string | |
| string | |
| string | |
| boolean | |
| string | |
| string | |
| string | |
controllers.cloudflared.strategy (52) RollingUpdate | string |
controllers.cloudflared.containers.app.args[] (51) - tunnel | string |
| boolean, string | |
| string | |
| string | |
| boolean | |
| boolean | |
controllers.cloudflared.containers.app.env.TUNNEL_CRED_FILE (25) /etc/cloudflared/creds/credentials.json | string |
| string | |
| string | |
| string | |
| boolean, string | |
| string, number | |
| string | |
controllers.cloudflared.containers.app.image.repository (51) docker.io/cloudflare/cloudflared | string |
| string | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| string | |
| string | |
| string | |
| boolean | |
| string | |
| string | |
| boolean | |
| string | |
controllers.cloudflared.containers.app.envFrom[].secretRef.name (26) cloudflared-secret | string |
| string | |
| boolean | |
| string | |
| string | |
| boolean | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| boolean | |
| boolean | |
| string | |
| number | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| string | |
| number | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| boolean | |
| string | |
| boolean | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| boolean | |
| string | |
| string | |
| string | |
| boolean | |
| boolean | |
| boolean | |
| number | |
| number | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| number | |
| number | |
| number | |
| boolean | |
| number | |
| string | |
| string | |
| string | |
| number | |
controllers.cloudflared.pod.topologySpreadConstraints[].topologyKey (9) kubernetes.io/hostname | string |
| string | |
| string | |
| string | |
| boolean | |
| string | |
| boolean | |
controllers.main.containers.main.args[] (4) - tunnel | string |
| string, boolean | |
controllers.main.containers.main.env.TUNNEL_CRED_FILE (4) /etc/cloudflared/creds/credentials.json | string |
| string | |
| boolean | |
| string | |
| string | |
| string | |
| boolean | |
controllers.main.containers.main.image.repository (4) docker.io/cloudflare/cloudflared | string |
controllers.main.containers.main.image.tag (4) 2025.11.1@sha256:89ee50efb1e9cb2ae30281a8a404fed95eb8f02f0a972617526f8c5b417acae2 | string |
| string | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| string | |
| string | |
| string | |
| boolean | |
| string | |
| boolean | |
| string | |
| number | |
| number | |
| boolean | |
| string | |
| number | |
controllers.main.pod.topologySpreadConstraints[].topologyKey (3) kubernetes.io/hostname | string |
| string | |
| boolean | |
| number | |
controllers.main.strategy (3) RollingUpdate | string |
| string | |
| string | |
| string | |
| string | |
| boolean | |
| boolean | |
| string | |
| string | |
| string | |
| string | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| string | |
| string | |
| boolean | |
| string | |
| boolean | |
| number | |
| string | |
| number | |
service.app.controller (33) cloudflared | string |
| string | |
| string | |
| number | |
| string | |
| number | |
| string | |
| string | |
| string | |
| string | |
| string | |
serviceMonitor.app.serviceName (34) cloudflared | string |
| boolean | |
| string | |
| string | |
| string | |
| string | |
| string | |
serviceMonitor.main.serviceName (4) cloudflared | string |
| boolean | |
| string | |
| string | |
| string | |
| string | |
| number | |
| boolean | |
| number | |
| string | |
| number | |
| string | |
| string | |
| number | |
defaultPodOptions.topologySpreadConstraints[].topologyKey (4) kubernetes.io/hostname | string |
| string | |
| boolean | |
| boolean | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| number | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string |