chore: remove dead OpenShift DNS records

[xnoto]

Summary

The cluster is now k3s; the OpenShift IngressController + API server + image-registry endpoints don't exist anymore. External traffic flows through Cloudflare Tunnels (managed in `kustomize-cluster`). The four `cloudflare_dns_record` CNAMEs that pointed at `ltc.makeitwork.cloud` are dead:

• `api` (api.makeitwork.cloud)
• `apps` (apps.makeitwork.cloud)
• `apps_wildcard` (*.apps.makeitwork.cloud)
• `openshift_image_registry` (default-route-openshift-image-registry.makeitwork.cloud)

After apply, the corresponding Cloudflare DNS records are deleted. Nothing in the active cluster references these names.

Test plan

• Plan output shows 4 `cloudflare_dns_record` deletions and no other changes
• After apply, `dig api.makeitwork.cloud` and the three siblings return NXDOMAIN
• kubectl access via `k3s.makeitwork.cloud` (Cloudflare Access TCP tunnel) still works

🤖 Generated with Claude Code

[github-actions]

OpenTofu Plan

OpenTofu will perform the following actions:

  # cloudflare_dns_record.api will be destroyed
  # (because cloudflare_dns_record.api is not in configuration)
  - resource "cloudflare_dns_record" "api" {
      - content     = "ltc.makeitwork.cloud" -> null
      - created_on  = "2025-01-09T19:01:58Z" -> null
      - id          = "1f7873b63ad9449b31efb708fb1395a1" -> null
      - meta        = jsonencode({})
      - modified_on = "2025-01-09T19:01:58Z" -> null
      - name        = "api.makeitwork.cloud" -> null
      - proxiable   = true -> null
      - proxied     = false -> null
      - settings    = {
          - flatten_cname = false -> null
          - ipv4_only     = false -> null
          - ipv6_only     = false -> null
        } -> null
      - tags        = [] -> null
      - ttl         = 1 -> null
      - type        = "CNAME" -> null
      - zone_id     = (sensitive value) -> null
    }

  # cloudflare_dns_record.apps will be destroyed
  # (because cloudflare_dns_record.apps is not in configuration)
  - resource "cloudflare_dns_record" "apps" {
      - content     = "ltc.makeitwork.cloud" -> null
      - created_on  = "2025-01-09T19:03:12Z" -> null
      - id          = "c455a30adc95977977f99c48ace6caaa" -> null
      - meta        = jsonencode({})
      - modified_on = "2025-01-09T19:03:12Z" -> null
      - name        = "apps.makeitwork.cloud" -> null
      - proxiable   = true -> null
      - proxied     = false -> null
      - settings    = {
          - flatten_cname = false -> null
          - ipv4_only     = false -> null
          - ipv6_only     = false -> null
        } -> null
      - tags        = [] -> null
      - ttl         = 1 -> null
      - type        = "CNAME" -> null
      - zone_id     = (sensitive value) -> null
    }

  # cloudflare_dns_record.apps_wildcard will be destroyed
  # (because cloudflare_dns_record.apps_wildcard is not in configuration)
  - resource "cloudflare_dns_record" "apps_wildcard" {
      - content     = "ltc.makeitwork.cloud" -> null
      - created_on  = "2025-01-09T19:05:17Z" -> null
      - id          = "e88358018eb36c1ba9b24bc472293636" -> null
      - meta        = jsonencode({})
      - modified_on = "2025-01-09T19:05:17Z" -> null
      - name        = "*.apps.makeitwork.cloud" -> null
      - proxiable   = true -> null
      - proxied     = false -> null
      - settings    = {
          - flatten_cname = false -> null
          - ipv4_only     = false -> null
          - ipv6_only     = false -> null
        } -> null
      - tags        = [] -> null
      - ttl         = 1 -> null
      - type        = "CNAME" -> null
      - zone_id     = (sensitive value) -> null
    }

  # cloudflare_dns_record.openshift_image_registry will be destroyed
  # (because cloudflare_dns_record.openshift_image_registry is not in configuration)
  - resource "cloudflare_dns_record" "openshift_image_registry" {
      - content     = "ltc.makeitwork.cloud" -> null
      - created_on  = "2025-01-09T19:07:11Z" -> null
      - id          = "065a8288c834b0a9e6edf1f09009ddbc" -> null
      - meta        = jsonencode({})
      - modified_on = "2025-01-09T19:07:11Z" -> null
      - name        = "default-route-openshift-image-registry.makeitwork.cloud" -> null
      - proxiable   = true -> null
      - proxied     = false -> null
      - settings    = {
          - flatten_cname = false -> null
          - ipv4_only     = false -> null
          - ipv6_only     = false -> null
        } -> null
      - tags        = [] -> null
      - ttl         = 1 -> null
      - type        = "CNAME" -> null
      - zone_id     = (sensitive value) -> null
    }

Plan: 0 to add, 0 to change, 4 to destroy.