Cloudflared is a lightweight proxy client for securely connecting applications to Cloudflare’s network. It powers Cloudflare Tunnel, allowing services to be exposed without opening ports or configuring firewall rules. cloudflared routes traffic through Cloudflare’s global network, enhancing security with DDoS protection, authentication, and encrypted connections. It supports HTTP, TCP, and QUIC, making it ideal for self-hosted services, remote access, and zero-trust networking.
Install with:
helm repo add app-template oci://ghcr.io/bjw-s-labs/helm/app-template
helm install cloudflared app-template/cloudflared -f values.yamlSee examples from other people.
| Name | Repo | Stars | Version | Timestamp |
|---|---|---|---|---|
| cloudflared | ahgraber/homelab-gitops-k3s | 108 | 4.6.2 | 3 days ago |
| cloudflared | szinn/k8s-homelab | 287 | 4.6.2 | 7 days ago |
| cloudflared | bjw-s-labs/home-ops | 807 | 4.6.2 | 8 days ago |
| cloudflared | bjw-s/home-ops | 395 | 4.6.2 | 8 days ago |
| cloudflared | Pumba98/flux2-gitops | 69 | 4.6.2 | 18 days ago |
See the most popular values for this chart:
| Key | Types |
|---|---|
| number | |
service.app.controller (34) cloudflared | string |
| string | |
| string | |
| number | |
| string | |
| number | |
controllers.cloudflared.containers.app.args[] (57) - tunnel | string |
| boolean, string | |
| string | |
| string | |
| boolean | |
controllers.cloudflared.containers.app.env.TUNNEL_CRED_FILE (29) /etc/cloudflared/creds/credentials.json | string |
| boolean | |
| string | |
| string | |
| string | |
| string, number | |
| boolean, string | |
| string | |
controllers.cloudflared.containers.app.image.repository (57) docker.io/cloudflare/cloudflared | string |
controllers.cloudflared.containers.app.image.tag (57) 2026.2.0@sha256:404528c1cd63c3eb882c257ae524919e4376115e6fe57befca8d603656a91a4c | string |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| string | |
| string | |
| string | |
| string | |
| boolean | |
| string | |
| string | |
| boolean | |
| string | |
controllers.cloudflared.containers.app.envFrom[].secretRef.name (29) {{ .Release.Name }}-secret | string |
| string | |
| boolean | |
| string | |
| string | |
| boolean | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| boolean | |
| boolean | |
| string | |
| number | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| string | |
| number | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| boolean | |
| string | |
| boolean | |
| string | |
| string | |
| string | |
controllers.cloudflared.strategy (57) RollingUpdate | string |
| string | |
| string | |
| string | |
| string | |
| number | |
| number | |
| number | |
| boolean | |
| number | |
| string | |
| string | |
| number | |
controllers.cloudflared.pod.topologySpreadConstraints[].topologyKey (7) kubernetes.io/hostname | string |
| string | |
| string | |
| string | |
| boolean | |
| string | |
| boolean | |
controllers.main.containers.main.args[] (4) - tunnel | string |
| string, boolean | |
controllers.main.containers.main.env.TUNNEL_CRED_FILE (4) /etc/cloudflared/creds/credentials.json | string |
| string | |
| boolean | |
| string | |
| string | |
| string | |
| boolean | |
controllers.main.containers.main.image.repository (4) docker.io/cloudflare/cloudflared | string |
controllers.main.containers.main.image.tag (4) 2026.2.0@sha256:404528c1cd63c3eb882c257ae524919e4376115e6fe57befca8d603656a91a4c | string |
| string | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| string | |
| string | |
| string | |
| boolean | |
| string | |
| boolean | |
| string | |
| number | |
| number | |
| boolean | |
| string | |
| number | |
controllers.main.pod.topologySpreadConstraints[].topologyKey (3) kubernetes.io/hostname | string |
| string | |
| boolean | |
| number | |
controllers.main.strategy (3) RollingUpdate | string |
| string | |
| string | |
| string | |
| string | |
| boolean | |
| boolean | |
| string | |
| string | |
| string | |
| string | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| string | |
| string | |
| boolean | |
| string | |
| boolean | |
| number | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
serviceMonitor.app.serviceName (33) cloudflared | string |
| boolean | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
serviceMonitor.main.serviceName (3) cloudflared | string |
| boolean | |
| string | |
| string | |
| string | |
| string | |
persistence.config.globalMounts[].path (52) /etc/cloudflared/config/config.yaml | string |
| string | |
| boolean | |
persistence.config.type (52) configMap | string |
persistence.config.name (44) cloudflared-configmap | string |
| string | |
| boolean | |
persistence.creds.globalMounts[].path (32) /etc/cloudflared/creds/credentials.json | string |
| boolean | |
persistence.creds.globalMounts[].subPath (32) credentials.json | string |
persistence.creds.name (32) cloudflared-secret | string |
| string | |
| boolean | |
persistence.config-file.globalMounts[].path (10) /etc/cloudflared/config.yaml | string |
| string | |
| boolean | |
persistence.config-file.type (10) configMap | string |
| string | |
persistence.config-file.name (3) cloudflared-configmap | string |
| string | |
| boolean | |
| string | |
| string | |
| string | |
| string | |
| boolean | |
| string | |
| string | |
| string | |
| string | |
| number | |
| boolean | |
| number | |
| string | |
| number | |
| string | |
| string | |
| number | |
defaultPodOptions.topologySpreadConstraints[].topologyKey (5) kubernetes.io/hostname | string |
| string | |
| boolean | |
| boolean | |
| string | |
| string | |
| string | |
configMaps.config.data."config.yaml" (16) ingress:
- hostname: "*.${SECRET_DOMAIN}"
originRequest:
http2Origin: true
originServerName: external.${SECRET_DOMAIN}
service: https://envoy-external.{{ .Release.Namespace }}.svc.cluster.local:443
- service: http_status:404 | string |
| string | |
| string | |
| number | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string |