Skip to content

Ingress Class

The Helm chart installs an IngressClass named cloudflare-tunnel that the controller watches. Any Ingress tagged with this class is reconciled into Cloudflare Tunnel and DNS records.

FieldDefaultDescription
ingressClass.namecloudflare-tunnelName of the class to reference from your ingress objects.
ingressClass.controllerValuestrrl.dev/cloudflare-tunnel-ingress-controllerIdentifier reported back to Kubernetes.
ingressClass.isDefaultClassfalseWhen set to true, new ingresses without a class inherit cloudflare-tunnel.

To target the controller, set one of the following on your ingress manifest:

spec:
ingressClassName: cloudflare-tunnel

or the legacy annotation:

metadata:
annotations:
kubernetes.io/ingress.class: cloudflare-tunnel

Avoid enabling the class globally (isDefaultClass: true) unless every ingress in the cluster should use Cloudflare Tunnel. Mixing controllers with the same default class can create conflicting reconciliations.