Prevent tenants to use ServiceType LoadBalancer

[bsctl]

Describe the feature

In a multi-tenant environment, it would be useful to prevent tenant owners to use ServiceType LoadBalancer. The reason for that is ServiceType LoadBalancer creates an external Load Balancer cloud resource (when allowed by the Cloud Provider) and this can be not allowed by the cluster admin policy.

What would the new user story look like?

To prevent tenant users to allocate external cloud Load Balancers, it would be useful to add to tenant CRD the following option:

  serviceOptions:
    allowedServices:
      loadBalancer: false

Default value is true.

Expected behavior

ServiceType LoadBalancer can be not allowed for tenants