Connecting APs with Cloudflare Tunnel

Hi Everyone,
I am new to the Cloudflare ZeroTrust platform as well as the technology itself. Referring to the topology presented in the attached document, I want to connect my access points based on a controller located behind an ISP router (Site 2) with their controller situated behind an ISP router using CG-NAT.

The access points only need a link pointing to the controller. What are the steps to follow to solve this issue?"

Do you think any of those can run cloudflared?