---
apiVersion: v1
kind: Service
metadata:
  name: fortigate-lb
  namespace: ${TENANT_NAMESPACE}
  labels:
    app.kubernetes.io/component: fortigate-lb
spec:
  type: LoadBalancer
  ports:
    - port: 4500
      name: ipsec-nat
      targetPort: 4500
      protocol: UDP
    - port: 500
      name: key-management
      targetPort: 500
      protocol: UDP
    - port: 22
      name: ssh
      targetPort: 22
      protocol: TCP
    - port: 443
      name: https
      targetPort: 443
      protocol: TCP
  selector:
    kubevirt.io/domain: fortigate-s3