fail   bool
	}{{
		name:   "create: without externalIPs",
		newSvc: makeSvc(),
	}, {
		name:   "create: with externalIPs",
		newSvc: makeSvc("1.1.1.1"),
		fail:   true,
	}, {
		name:   "update: same externalIPs",
		newSvc: makeSvc("1.1.1.1", "2.2.2.2"),
		oldSvc: makeSvc("1.1.1.1", "2.2.2.2"),
	}, {
		name:   "update: reorder externalIPs",
		newSvc: makeSvc("1.1.1.1", "2.2.2.2"),
		oldSvc: makeSvc("2.2.2.2", "1.1.1.1"),

      nodePort: {{ .Values.service.nodePort }}
      {{- else }}
      targetPort: {{ .Values.minioAPIPort }}
      {{- end }}
  {{- if .Values.service.externalIPs }}
  externalIPs:
    {{- range $i , $ip := .Values.service.externalIPs }}
    - {{ $ip }}
    {{- end }}
  {{- end }}
  selector:
    app: {{ template "minio.name" . }}

    targetPort: 15012
  - name: tls-webhook
    port: 15017
    targetPort: 15017
{{- else }}
{{ .Values.service.ports | toYaml | indent 4 }}
{{- end }}
{{- if .Values.service.externalIPs }}
  externalIPs: {{- range .Values.service.externalIPs }}
    - {{.}}
  {{- end }}
{{- end }}
  selector:
    {{- include "gateway.selectorLabels" . | nindent 4 }}

		return nil
	}

	klog.V(4).Infof("Denying new use of ExternalIPs on Service %s/%s", newSvc.Namespace, newSvc.Name)
	return admission.NewForbidden(attr, fmt.Errorf("Use of external IPs is denied by admission control"))
}

func isSubset(newSvc, oldSvc *core.Service) bool {
	// If new has none, it's a subset.
	if len(newSvc.Spec.ExternalIPs) == 0 {
		return true
	}

      nodePort: {{ .Values.consoleService.nodePort }}
      {{- else }}
      targetPort: {{ .Values.minioConsolePort }}
      {{- end }}
  {{- if .Values.consoleService.externalIPs }}
  externalIPs:
    {{- range $i , $ip := .Values.consoleService.externalIPs }}
    - {{ $ip }}
    {{- end }}
  {{- end }}
  selector:
    app: {{ template "minio.name" . }}

			warnings = append(warnings, getWarningsForIP(field.NewPath("spec").Child("clusterIPs").Index(i), clusterIP)...)
		}
	}

	for i, externalIP := range service.Spec.ExternalIPs {
		warnings = append(warnings, getWarningsForIP(field.NewPath("spec").Child("externalIPs").Index(i), externalIP)...)
	}

	if len(service.Spec.LoadBalancerIP) > 0 {

	})
	checkExternalPolicyLocal(false, &v1.Service{
		Spec: v1.ServiceSpec{
			Type:        v1.ServiceTypeClusterIP,
			ExternalIPs: []string{"1.2.3.4"},
		},
	})
	checkExternalPolicyLocal(false, &v1.Service{
		Spec: v1.ServiceSpec{
			Type:                  v1.ServiceTypeClusterIP,
			ExternalIPs:           []string{"1.2.3.4"},
			ExternalTrafficPolicy: v1.ServiceExternalTrafficPolicyCluster,
		},
	})

      }
    ],
    "selector": {
      "selectorKey": "selectorValue"
    },
    "clusterIP": "clusterIPValue",
    "clusterIPs": [
      "clusterIPsValue"
    ],
    "type": "typeValue",
    "externalIPs": [
      "externalIPsValue"
    ],
    "sessionAffinity": "sessionAffinityValue",
    "loadBalancerIP": "loadBalancerIPValue",
    "loadBalancerSourceRanges": [
      "loadBalancerSourceRangesValue"
    ],

apiVersion: release-notes/v2
kind: feature
area: networking
issue:
  - 28381

releaseNotes:
- |
  **Improved** Automatic detection of [externalIPs](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#servicespec-v1-core)

      }
    ],
    "selector": {
      "selectorKey": "selectorValue"
    },
    "clusterIP": "clusterIPValue",
    "clusterIPs": [
      "clusterIPsValue"
    ],
    "type": "typeValue",
    "externalIPs": [
      "externalIPsValue"
    ],
    "sessionAffinity": "sessionAffinityValue",
    "loadBalancerIP": "loadBalancerIPValue",
    "loadBalancerSourceRanges": [
      "loadBalancerSourceRangesValue"
    ],