fix(coder): keep coder.renner.uno off the public internet #4

Merged
k.renner merged 1 commits from coder-migration into master 2026-04-24 19:28:10 +00:00
Owner

Summary

  • Dropped external-dns.alpha.kubernetes.io/cloudflare-proxied: "true" and replaced with exclude: "true" so external-dns stops publishing a Cloudflare record for coder.renner.uno.
  • Coder is developer-internal; should not be reachable from the public internet.

Test plan

  • dig +short coder.renner.uno @1.1.1.1 returns empty after Flux reconciles
  • Internal cluster access still works via k8s-gateway
## Summary - Dropped `external-dns.alpha.kubernetes.io/cloudflare-proxied: "true"` and replaced with `exclude: "true"` so external-dns stops publishing a Cloudflare record for coder.renner.uno. - Coder is developer-internal; should not be reachable from the public internet. ## Test plan - [ ] `dig +short coder.renner.uno @1.1.1.1` returns empty after Flux reconciles - [ ] Internal cluster access still works via k8s-gateway
k.renner added 1 commit 2026-04-24 19:28:09 +00:00
Replace the external-dns cloudflare-proxied annotation (inherited from
other apps' pattern) with `exclude: true` so external-dns doesn't
publish a public Cloudflare record for coder.renner.uno. Coder is for
internal developer use only.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
k.renner merged commit 59e11ac598 into master 2026-04-24 19:28:09 +00:00
Sign in to join this conversation.