When I Would Replace NodePort With Ingress or a Load Balancer

This is the decision I am examining: the conditions that justify moving from direct node exposure to a richer edge abstraction.

Context

Later I changed the web-app image reference to docker.io/library/voiceware-web-app:latest and exposed it on NodePort 30080.

The decision mattered because Premature ingress design can slow an early migration, while leaving NodePort forever can create awkward routing and security operations.

Options I consider

Option A — keep the simplest current behavior. This minimizes moving parts and is often the right choice while proving a migration path.

Option B — introduce a stronger abstraction immediately. This can improve long-term consistency, but it also adds another system to debug before the underlying workload contract is stable.

Option C — keep the simple implementation, but make the boundary explicit and define the trigger for revisiting it. This is often my preferred migration posture.

Decision criteria

external or internal client -> edge/service -> application -> shared dependency

Why the Voiceware implementation is useful signal

The repository tells me what was actually chosen at that point in the project. It does not force me to argue that the choice is universal. Infrastructure decisions are contextual: an early test cluster, a production environment, and a multi-team platform may reasonably choose different levels of abstraction.

Trade-offs I would write into the ADR

The primary downside is the failure mode already identified: Premature ingress design can slow an early migration, while leaving NodePort forever can create awkward routing and security operations. The primary reason to keep the decision is the lesson: Choose the edge primitive from traffic shape, TLS, hostname, availability, and environment requirements rather than fashion.

I would also record what would make me revisit the decision: traffic growth, stronger availability targets, additional environments, security constraints, release complexity, or operational pain that the current model can no longer absorb cheaply.

Revisit triggers

• Map who depends on the shared service.
• Keep private dependencies private by default.
• Test from the same network context as the caller.
• Do not restart callers when the shared dependency is the failing layer.
• Choose NodePort/Ingress/LoadBalancer from requirements, not habit.

A good infrastructure decision is not one that never changes. It is one whose assumptions are visible enough that the team knows when it should change. The goal is not more Kubernetes. The goal is less ambiguity.