feat(filter): make filter Service type configurable (ClusterIP/LoadBalancer/NodePort)

api/v1alpha1/pipeline_types.go

@@ -158,6 +158,12 @@ type ServicePort struct {
 	// +kubebuilder:default=TCP
 	// +kubebuilder:validation:Enum=TCP;UDP
 	Protocol corev1.Protocol `json:"protocol,omitempty"`
+
+	// type defines the Kubernetes Service type to create for this port. Defaults to ClusterIP. Use LoadBalancer to expose the Service outside the cluster (note: cluster operators may restrict external types via ResourceQuota).
+	// +optional
+	// +kubebuilder:default=ClusterIP
+	// +kubebuilder:validation:Enum=ClusterIP;LoadBalancer;NodePort
+	Type corev1.ServiceType `json:"type,omitempty"`
 }
 
 // Filter defines a containerized processing step in the pipeline

config/crd/bases/filter.plainsight.ai_pipelines.yaml

@@ -395,6 +395,17 @@ spec:
                       maximum: 65535
                       minimum: 1
                       type: integer
+                    type:
+                      default: ClusterIP
+                      description: 'type defines the Kubernetes Service type to create
+                        for this port. Defaults to ClusterIP. Use LoadBalancer to
+                        expose the Service outside the cluster (note: cluster operators
+                        may restrict external types via ResourceQuota).'
+                      enum:
+                      - ClusterIP
+                      - LoadBalancer
+                      - NodePort
+                      type: string
                   required:
                   - name
                   - port

deployment/openfilter-pipelines-controller/crds/filter.plainsight.ai_pipelines.yaml

@@ -395,6 +395,17 @@ spec:
                       maximum: 65535
                       minimum: 1
                       type: integer
+                    type:
+                      default: ClusterIP
+                      description: 'type defines the Kubernetes Service type to create
+                        for this port. Defaults to ClusterIP. Use LoadBalancer to
+                        expose the Service outside the cluster (note: cluster operators
+                        may restrict external types via ResourceQuota).'
+                      enum:
+                      - ClusterIP
+                      - LoadBalancer
+                      - NodePort
+                      type: string
                   required:
                   - name
                   - port

internal/controller/pipelineinstance_controller_streaming.go

@@ -615,6 +615,12 @@ func (r *PipelineInstanceReconciler) ensureFilterServices(ctx context.Context, p
 				protocol = svcPort.Protocol
 			}
 
+			// Apply ClusterIP as the default service type if not specified
+			serviceType := svcPort.Type
+			if serviceType == "" {
+				serviceType = corev1.ServiceTypeClusterIP
+			}
+
 			desiredService := &corev1.Service{
 				ObjectMeta: metav1.ObjectMeta{
 					Name:      serviceName,
@@ -638,7 +644,7 @@ func (r *PipelineInstanceReconciler) ensureFilterServices(ctx context.Context, p
 							Protocol:   protocol,
 						},
 					},
-					Type: corev1.ServiceTypeClusterIP,
+					Type: serviceType,
 				},
 			}