apiVersion: v1
kind: Service
metadata:
  name: {{ taskserv.name }}-ssh
  namespace: {{ taskserv.namespace }}
  labels:
    app.kubernetes.io/name: {{ taskserv.name }}
    app.kubernetes.io/managed-by: provisioning
    app.kubernetes.io/component: ssh
{% if taskserv.ssh_lb_ip %}
  annotations:
    io.cilium/lb-ipam-ips: {{ taskserv.ssh_lb_ip }}
    lbipam.cilium.io/sharing-key: {{ taskserv.ssh_lb_sharing_key }}
    lbipam.cilium.io/sharing-cross-namespace: {{ taskserv.gateway_ns }}
{% endif %}
spec:
  type: {% if taskserv.ssh_lb_ip %}LoadBalancer{% else %}NodePort{% endif %}
  externalTrafficPolicy: Local
  selector:
    app.kubernetes.io/name: {{ taskserv.name }}
  ports:
    - name: ssh
      port: {{ taskserv.ssh_port }}
      targetPort: ssh
{% if not taskserv.ssh_lb_ip %}
      nodePort: {{ taskserv.ssh_nodeport }}
{% endif %}
      protocol: TCP