--- apiVersion: v1 kind: Service metadata: name: haproxy namespace: haproxy annotations: purelb.io/service-group: dmz purelb.io/addresses: 198.18.199.1 spec: type: LoadBalancer loadBalancerIP: "198.18.199.1" # Source IP must survive for X-Real-IP. externalTrafficPolicy: Local # Pins a client to one replica, standing in for the dropped stick-table peers. sessionAffinity: ClientIP selector: app: haproxy ports: - name: http port: 80 protocol: TCP targetPort: http - name: https port: 443 protocol: TCP targetPort: https