# VNC is how you drive the interactive macOS install. Deliberately ClusterIP —
# it is an unauthenticated console onto a machine holding a live Apple ID
# session. Reach it with `kubectl port-forward`, never an Ingress.
apiVersion: v1
kind: Service
metadata:
  name: macos-vnc
spec:
  type: ClusterIP
  selector:
    app.kubernetes.io/name: macos-bluebubbles
  ports:
    - name: vnc
      port: 5999
      targetPort: vnc
---
# The BlueBubbles REST API, once installed inside the guest. This is the stable
# name cluster services use, so callers never depend on the pod IP or on whether
# the backend is this VM or a real Mac mini later.
apiVersion: v1
kind: Service
metadata:
  name: bluebubbles
spec:
  type: ClusterIP
  selector:
    app.kubernetes.io/name: macos-bluebubbles
  ports:
    - name: http
      port: 1234
      targetPort: bluebubbles