apiVersion: v1
kind: Service
metadata:
  name: {{ taskserv.name }}
  namespace: {{ taskserv.namespace }}
  labels:
    app.kubernetes.io/name: {{ taskserv.name }}
    app.kubernetes.io/managed-by: provisioning
  annotations:
    lbipam.cilium.io/ips: "{{ taskserv.private_lb_ip }}"
spec:
  type: LoadBalancer
  allocateLoadBalancerNodePorts: false
  externalTrafficPolicy: Cluster
  selector:
    app.kubernetes.io/name: {{ taskserv.name }}
  ports:
    - name: https
      port: 443
      targetPort: 8443
      protocol: TCP