feat: support service configuration in Kubernetes utilities

Author: idoshamun

package.json

@@ -42,5 +42,8 @@
     "typescript": "^5.9.3",
     "typescript-eslint": "^8.54.0"
   },
-  "packageManager": "pnpm@10.28.2"
+  "packageManager": "pnpm@10.28.2",
+  "volta": {
+    "node": "24.14.0"
+  }
 }

src/k8s.ts

@@ -263,13 +263,24 @@ export interface KubernetesApplicationArgs {
     iap?: Input<Record<string, unknown>>;
     securityPolicy?: Input<string>;
   }>;
+  service?: KubernetesServiceArgs;
   spot?: {
     enabled: boolean;
     weight?: number;
     required?: boolean;
   };
 }
 
+export interface KubernetesServiceArgs {
+  type?: k8s.types.enums.core.v1.ServiceSpecType;
+  annotations?: Record<string, Input<string>>;
+  loadBalancerSourceRanges?: Input<string[]>;
+  gkeInternalLoadBalancer?: {
+    enabled: boolean;
+    allowGlobalAccess?: boolean;
+  };
+}
+
 export interface KubernetesApplicationReturn {
   labels: Input<Record<string, Input<string>>>;
   deployment: k8s.apps.v1.Deployment;
@@ -496,6 +507,7 @@ export const createAutoscaledExposedApplication = ({
   shouldCreatePDB = true,
   provider,
   serviceType = 'ClusterIP',
+  service,
   strategy = {
     type: 'RollingUpdate',
     rollingUpdate: {
@@ -511,14 +523,34 @@ export const createAutoscaledExposedApplication = ({
   serviceType?: k8s.types.enums.core.v1.ServiceSpecType;
 }): KubernetesApplicationReturn & { service: k8s.core.v1.Service } => {
   const { resourcePrefix = '', name, namespace } = args;
+  const resolvedServiceType = service?.type ?? serviceType;
+  if (
+    service?.loadBalancerSourceRanges &&
+    resolvedServiceType !== 'LoadBalancer'
+  ) {
+    throw new Error(
+      'service.loadBalancerSourceRanges is supported only when service type is LoadBalancer',
+    );
+  }
   const returnObj = createAutoscaledApplication({
     ...args,
     shouldCreatePDB,
     provider,
     strategy,
   });
   const { labels } = returnObj;
-  const annotations: Record<string, Output<string>> = {};
+  const annotations: Record<string, Input<string>> = {
+    ...(service?.annotations ?? {}),
+  };
+  if (service?.gkeInternalLoadBalancer?.enabled) {
+    annotations['cloud.google.com/load-balancer-type'] = 'Internal';
+    annotations['networking.gke.io/load-balancer-type'] = 'Internal';
+    if (service.gkeInternalLoadBalancer.allowGlobalAccess) {
+      annotations[
+        'networking.gke.io/internal-load-balancer-allow-global-access'
+      ] = 'true';
+    }
+  }
   if (enableCdn || serviceTimeout || backendConfig) {
     const rawSpec: Record<string, unknown> = {};
     if (enableCdn) {
@@ -579,7 +611,7 @@ export const createAutoscaledExposedApplication = ({
       ? servicePorts
       : [{ port: 80, targetPort: 'http', protocol: 'TCP', name: 'http' }];
 
-  const service = new k8s.core.v1.Service(
+  const serviceResource = new k8s.core.v1.Service(
     `${resourcePrefix}service`,
     {
       metadata: {
@@ -589,14 +621,15 @@ export const createAutoscaledExposedApplication = ({
         annotations,
       },
       spec: {
-        type: serviceType,
+        type: resolvedServiceType,
         ports,
         selector: labels,
+        loadBalancerSourceRanges: service?.loadBalancerSourceRanges,
       },
     },
     { provider, dependsOn: [returnObj.deployment] },
   );
-  return { ...returnObj, service };
+  return { ...returnObj, service: serviceResource };
 };
 
 export function createKubernetesSecretFromRecord({

src/suite/index.ts

@@ -303,6 +303,7 @@ function deployApplication(
     env = [],
     createService,
     serviceType,
+    service,
     metric,
     labels,
     command,
@@ -385,6 +386,7 @@ function deployApplication(
     return createAutoscaledExposedApplication({
       ...appArgs,
       serviceType,
+      service,
       enableCdn,
       serviceTimeout,
       backendConfig,

src/suite/types.ts

@@ -44,7 +44,9 @@ export interface ApplicationArgs {
   env?: Input<k8s.types.input.core.v1.EnvVar>[];
   createService?: boolean;
   isApi?: boolean;
+  /** @deprecated prefer service.type */
   serviceType?: k8s.types.enums.core.v1.ServiceSpecType;
+  service?: KubernetesApplicationArgs['service'];
   metric: CustomMetric;
   labels?: Record<string, string>;
   command?: Input<Input<string>[]>;