apiVersion: v1
kind: Service
metadata:
  name: k8s-mgmt-pod
spec:
  type: ClusterIP
  selector:
    app.kubernetes.io/name: k8s-mgmt-pod
  ports:
    - name: ssh
      port: 22
      targetPort: ssh
      protocol: TCP
    - name: webssh
      port: 3000
      targetPort: webssh
      protocol: TCP

# Expose externally only if you explicitly want SSH and web SSH reachable from outside the cluster.
# apiVersion: v1
# kind: Service
# metadata:
#   name: k8s-mgmt-pod-external
# spec:
#   type: LoadBalancer
#   selector:
#     app.kubernetes.io/name: k8s-mgmt-pod
#   ports:
#     - name: ssh
#       port: 22
#       targetPort: ssh
#     - name: webssh
#       port: 3000
#       targetPort: webssh