lb.jsonnet

function(request) {
  local service = request.object,

  // Uncommenting this cause error as
  // Expected token OPERATOR but got (".", ".")
  // as DecoratorController does not support status like "labels or annotations"

  // service.status.loadBalancer:
  //  if service.spec.type == "LoadBalancer" then
  //    {
  //      ingress: [
  //        {
  //          hostname: "example.com",
  //          ip: "1.1.1.1",
  //        }
  //      ]
  //    },
  //  else
  //    service.status.loadBalancer,

  // Create a service for each Pod, with a selector on the given label key.
  attachments:
    if service.spec.type == "LoadBalancer" then
      [
        {
          apiVersion: "networking.k8s.io/v1",
          kind: "NetworkPolicy",
          metadata: {
            name: service.metadata.name + "-lb",
            labels: service.metadata.labels,
            namespace: service.metadata.namespace,
          },
          spec: {
            podSelector: {
              matchLabels: service.spec.selector,
            },
            policyTypes: ["Ingress"],
            ingress: [
              {
                from: [
                  {
                    ipBlock: {
                      cidr: "0.0.0.0/0",
                    },
                  },
                ],
                ports: [
                  {
                    protocol: service.spec.ports[0].protocol,
                    port: service.spec.ports[0].port,
                  }
                ]
              }
            ]
          }
        }
      ]
    else
    []
}