apiVersion: apps/v1
kind: Deployment
metadata:
  name: cloudflared
  namespace: cloudflared
spec:
  replicas: 1
  selector:
    matchLabels:
      app: cloudflared
  template:
    metadata:
      labels:
        app: cloudflared
    spec:
      containers:
        - name: cloudflared
          image: cloudflare/cloudflared:2026.9.3
          args:
            - tunnel
            - --config
            - /etc/cloudflared/config.yaml
            - run
            - --token
            - $(TUNNEL_TOKEN)
          envFrom:
            - secretRef:
                name: cloudflared-env
          volumeMounts:
            - name: config
              mountPath: /etc/cloudflared/config.yaml
              subPath: config.yaml
      volumes:
        - name: config
          configMap:
            name: cloudflared-config