diff --git a/k8s/namespaces/base/network-system/cloudflared/app/dnsendpoint.yaml b/k8s/namespaces/base/network-system/cloudflared/app/dnsendpoint.yaml
index 6e49a44a6f..ce3ca9746b 100644
--- a/k8s/namespaces/base/network-system/cloudflared/app/dnsendpoint.yaml
+++ b/k8s/namespaces/base/network-system/cloudflared/app/dnsendpoint.yaml
@@ -8,6 +8,7 @@ metadata:
   namespace: networking
   annotations:
     external-dns.alpha.kubernetes.io/target: "ingress.${CLUSTER_DOMAIN}"
+    external-dns.alpha.kubernetes.io/external: 'true'
 spec:
   endpoints:
     - dnsName: "ingress.${CLUSTER_DOMAIN}"
@@ -24,6 +25,7 @@ metadata:
   namespace: networking
   annotations:
     external-dns.alpha.kubernetes.io/target: "api.${CLUSTER_DOMAIN}"
+    external-dns.alpha.kubernetes.io/external: 'true'
 spec:
   endpoints:
     - dnsName: "api.${CLUSTER_DOMAIN}"