Setup k8s cloudflared deployment to expose service api endpoint only for warp auth

Hi, I’ve followed this guide to expose an internal service with k8s and cloudflared with a deployment

https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/deployment-guides/kubernetes/

But, what I need is to expose internal dns services to only authenticated users via warp client, how can I achieve this?

my deployment looks like this:

https://pastebin.mozilla.org/7pd61MMq