80 lines
2.4 KiB
YAML
80 lines
2.4 KiB
YAML
# Default values for cloudflare-tunnel.
|
|
|
|
# Cloudflare parameters.
|
|
cloudflare:
|
|
# Your Cloudflare account number.
|
|
account: ""
|
|
# The name of the tunnel this instance will serve
|
|
tunnelName: ""
|
|
# The ID of the above tunnel.
|
|
tunnelId: ""
|
|
# The secret for the tunnel.
|
|
secret: ""
|
|
# If true, turn on WARP routing for TCP
|
|
enableWarp: false
|
|
# Define ingress rules for the tunnel. See
|
|
# https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/configuration/configuration-file/ingress
|
|
ingress: []
|
|
# The first rule proxies traffic to the httpbin sample service named web-server at port 80
|
|
# - hostname: tunnel.example.com
|
|
# service: http://web-service:80
|
|
# This rule sends traffic to the built-in hello-world HTTP server. This can help debug connectivity
|
|
# issues. If hello.example.com resolves and tunnel.example.com does not, then the problem is
|
|
# in the connection from cloudflared to your local service, not from the internet to cloudflared.
|
|
# - hostname: hello.example.com
|
|
# service: hello_world
|
|
|
|
image:
|
|
repository: cloudflare/cloudflared
|
|
pullPolicy: IfNotPresent
|
|
# If supplied, this overrides "appVersion"
|
|
tag: ""
|
|
|
|
replicaCount: 2
|
|
|
|
imagePullSecrets: []
|
|
nameOverride: ""
|
|
fullnameOverride: ""
|
|
|
|
serviceAccount:
|
|
# Annotations to add to the service account
|
|
annotations: {}
|
|
# The name of the service account to use.
|
|
# If not set and create is true, a name is generated using the fullname template
|
|
name: ""
|
|
|
|
podAnnotations: {}
|
|
|
|
# Security items common to everything in the pod. Here we require that it
|
|
# does not run as the user defined in the image, literally named "nonroot".
|
|
podSecurityContext:
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
|
|
# Security items for one container. We lock it down.
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
readOnlyRootFilesystem: true
|
|
|
|
resources: {}
|
|
# We usually recommend not to specify default resources and to leave this as a conscious
|
|
# choice for the user. This also increases chances charts run on environments with little
|
|
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
|
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
|
# limits:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
# requests:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
|
|
nodeSelector: {}
|
|
|
|
tolerations: []
|
|
|
|
# Default affinity is to spread out over nodes; use this to override.
|
|
affinity: {}
|