Issues with service deployment - all shows fine no portforward

[QashQaw]

Hi All.
First of all , I'm a green newbie stilling running after 50years :-)

But I've startet playing around kubernetes for learning kubernetes.
Setup TuringPi 2.4 with 4 RK1 32GB - Talos V 1.7.6 - Kubernetes 1.31.1 & flux 2.2.3
After deploying the Flux repo - and backportet cilium to Flux.

Next I'll create the MySQL server for my KODI - but here's where I'm easely get confused.
I create the apps folder and would like to create my MySQL for kodi - added the path to kusomization.yaml files as intended.
And the MySQL er getting created and are running - but the portforwarding is missing something.

namespace.yaml

apiVersion: v1
kind: Namespace
metadata:
name: tv
labels:
pod-security.kubernetes.io/enforce: privileged
pod-security.kubernetes.io/enforce-version: latest

secret.yaml

apiVersion: v1
kind: Secret
metadata:
name: kodi-mysql-secret
namespace: tv
type: kubernetes.io/basic-auth
stringData:
password: XXXXXXXXXXX

apiVersion: v1
kind: Secret
metadata:
name: kodi-mysql-root-secret
namespace: tv
type: kubernetes.io/basic-auth
stringData:
password: XXXXXXXXXXXX

sql-volume.yaml

apiVersion: v1
kind: PersistentVolume
metadata:
name: kodi-mysql-pv-volume
labels:
type: nfs-production
spec:
storageClassName: nfs-storage-production
capacity:
storage: 10Gi
accessModes:
- ReadWriteOnce
hostPath:
path: "/var/storage/production"

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: kodi-mysql-pv-claim
namespace: tv
spec:
storageClassName: nfs-storage-production
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 10Gi

deployment.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
name: kodi-mysql
namespace: tv
spec:
selector:
matchLabels:
app: mysql
replicas: 1
strategy:
type: Recreate
template:
metadata:
labels:
app: mysql
spec:
containers:
- env:
- name: MYSQL_ROOT_PASSWORD
valueFrom:
secretKeyRef:
key: password
name: kodi-mysql-root-secret
image: mysql:latest
name: mysql
ports:
- containerPort: 3306
name: mysql
protocol: TCP
volumeMounts:
- name: kodi-mysql-persistent-storage
mountPath: /var/lib/mysql
volumes:
- name: kodi-mysql-persistent-storage
persistentVolumeClaim:
claimName: kodi-mysql-pv-claim

And finally service.yaml

apiVersion: v1
kind: Service
metadata:
name: kodi-mysql-service
namespace: tv
spec:
selector:
app: mysql
type: LoadBalancer
externalIPs:
- 172.16.40.25
ports:

• protocol: TCP
  port: 3306
  targetPort: 3306
  status:
  loadBalancer: {}

Everything is looking fine, all showing up and running and looking though lens it'll show the port 3306 should be open - but nmap scannings etc shows its closed - looking through the logs are not giving anything to me - can anyone point it out for me what I'm missing here

The configured VLAN IP on talos is answering ping - but does not show the port open when scanning,.
On the pod its possible to login to the MySQL through the terminal, setting the users etc - but it'll will not open the port - so I must do something wrong here - while deploying the SQL - or I'm missing something somewhere.