apiVersion: "cilium.io/v2"
kind: CiliumLoadBalancerIPPool
metadata:
  name: prometheus-private-pool
  labels:
    app.kubernetes.io/managed-by: provisioning
    app.kubernetes.io/name: prometheus
spec:
  blocks:
    - cidr: "{{ taskserv.private_lb_ip }}/32"
  serviceSelector:
    matchLabels:
      app.kubernetes.io/name: prometheus-private
---
apiVersion: v1
kind: Service
metadata:
  name: prometheus-private
  namespace: {{ taskserv.namespace }}
  labels:
    app.kubernetes.io/name: prometheus-private
    app.kubernetes.io/managed-by: provisioning
  annotations:
    lbipam.cilium.io/ips: "{{ taskserv.private_lb_ip }}"
spec:
  type: LoadBalancer
  allocateLoadBalancerNodePorts: false
  externalTrafficPolicy: Cluster
  selector:
    app: prometheus
  ports:
    - name: http
      port: {{ taskserv.provides.port | default(value=9090) }}
      targetPort: {{ taskserv.provides.port | default(value=9090) }}
      protocol: TCP