Setup k8s cloudflared deployment to expose service api endpoint only for warp auth

Hi, I’ve followed this guide to expose an internal service with k8s and cloudflared with a deployment

But, what I need is to expose internal dns services to only authenticated users via warp client, how can I achieve this?

my deployment looks like this: