{% if not taskserv.host_network %}
apiVersion: v1
kind: Service
metadata:
  name: {{ taskserv.name }}-vpn
  namespace: {{ taskserv.namespace }}
  labels:
    app.kubernetes.io/name: {{ taskserv.name }}
    app.kubernetes.io/managed-by: provisioning
  annotations:
    lbipam.cilium.io/ips: "{{ taskserv.lb_ipam_ip }}"
spec:
  type: LoadBalancer
  externalTrafficPolicy: Local
  selector:
    app.kubernetes.io/name: {{ taskserv.name }}
  ports:
    - port: {{ taskserv.listen_port }}
      targetPort: {{ taskserv.listen_port }}
      protocol: UDP
      name: wireguard
{% endif %}