feat: ionscale external service

Author: MuNeNiCK

dist/chart/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 name: kodiak
 description: A Helm chart for Kodiak - Kubernetes operator for ionscale/Tailscale VPN management
 type: application
-version: 0.1.15
-appVersion: "0.1.15"
+version: 0.1.16
+appVersion: "0.1.16"
 keywords:
   - kubernetes
   - operator

dist/chart/templates/ionscale/external-service.yaml

@@ -0,0 +1,26 @@
+{{- if and .Values.ionscale.enabled .Values.ionscale.externalService.enabled }}
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ .Values.ionscale.externalService.name }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "kodiak.ionscale.labels" . | nindent 4 }}
+  {{- with .Values.ionscale.externalService.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+spec:
+  type: LoadBalancer
+  {{- with .Values.ionscale.externalService.loadBalancerClass }}
+  loadBalancerClass: {{ . | quote }}
+  {{- end }}
+  externalTrafficPolicy: {{ .Values.ionscale.externalService.externalTrafficPolicy }}
+  selector:
+    {{- include "kodiak.ionscale.selectorLabels" . | nindent 4 }}
+  ports:
+    - name: api
+      port: {{ .Values.ionscale.externalService.port }}
+      targetPort: api
+      protocol: TCP
+{{- end }}

dist/chart/values.yaml

@@ -10,7 +10,7 @@ controllerManager:
   container:
     image:
       repository: ghcr.io/mni-cloud/kodiak
-      tag: "0.1.15"
+      tag: "0.1.16"
     args:
       - "--leader-elect"
       - "--metrics-bind-address=:8443"
@@ -132,6 +132,16 @@ ionscale:
     metricsPort: 9091
     stunPort: 3478
 
+  # Optional dedicated LoadBalancer Service for the Tailscale control protocol.
+  # Metrics and STUN remain available only through the internal Service.
+  externalService:
+    enabled: false
+    name: ionscale-control
+    annotations: {}
+    loadBalancerClass: ""
+    externalTrafficPolicy: Local
+    port: 8080
+
 # =============================================================================
 # [RBAC]: Role-Based Access Control
 # =============================================================================