Dropped external-dns.alpha.kubernetes.io/cloudflare-proxied: "true" and replaced with exclude: "true" so external-dns stops publishing a Cloudflare record for coder.renner.uno.
Coder is developer-internal; should not be reachable from the public internet.
Test plan
dig +short coder.renner.uno @1.1.1.1 returns empty after Flux reconciles
Internal cluster access still works via k8s-gateway
## Summary
- Dropped `external-dns.alpha.kubernetes.io/cloudflare-proxied: "true"` and replaced with `exclude: "true"` so external-dns stops publishing a Cloudflare record for coder.renner.uno.
- Coder is developer-internal; should not be reachable from the public internet.
## Test plan
- [ ] `dig +short coder.renner.uno @1.1.1.1` returns empty after Flux reconciles
- [ ] Internal cluster access still works via k8s-gateway
Replace the external-dns cloudflare-proxied annotation (inherited from
other apps' pattern) with `exclude: true` so external-dns doesn't
publish a public Cloudflare record for coder.renner.uno. Coder is for
internal developer use only.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Summary
external-dns.alpha.kubernetes.io/cloudflare-proxied: "true"and replaced withexclude: "true"so external-dns stops publishing a Cloudflare record for coder.renner.uno.Test plan
dig +short coder.renner.uno @1.1.1.1returns empty after Flux reconcilesupdate-audit-bot referenced this pull request2026-08-17 05:08:34 +00:00