apiVersion: v1
kind: Service
metadata:
  name: vault-active-direct
  namespace: vault
  labels:
    app.kubernetes.io/name: vault
    app.kubernetes.io/instance: vault
    io.cilium/bgp-announce: "true"
  annotations:
    lbipam.cilium.io/ips: "10.69.181.158"
spec:
  type: LoadBalancer
  externalTrafficPolicy: Local
  publishNotReadyAddresses: false
  loadBalancerSourceRanges:
    - 10.115.187.218/24
    - 10.63.81.107/24
    - 10.162.8.60/24
  selector:
    app.kubernetes.io/name: vault
    app.kubernetes.io/instance: vault
    component: server
    vault-active: "true"
  ports:
    - name: https
      port: 443
      targetPort: https-migration
      protocol: TCP
      appProtocol: https