apiVersion: v1
kind: Service
metadata:
  name: vault-active-tls
  namespace: vault
  labels:
    app.kubernetes.io/name: vault
    app.kubernetes.io/instance: vault
    app.kubernetes.io/component: server
spec:
  type: ClusterIP
  publishNotReadyAddresses: false
  ports:
    - name: https
      port: 443
      targetPort: https-migration
      protocol: TCP
      appProtocol: https
  selector:
    app.kubernetes.io/name: vault
    app.kubernetes.io/instance: vault
    component: server
    vault-active: "true"