Enable Service to be exposed as NodePort should be disabled by default

[rhtevan]

The --trait service.node-port is set to true by default. Given that node port is rarely used in OpenShift or Kubernetes these days for http services, would it not make more sense to default this to ClusterIP? Customers are typically pretty sensitive about opening ports directly to the cluster.

[agahchen]

Thank you for raising this issue @rhtevan . We were surprised to discover this through a separate QA process by our OpenShift cluster operations team recently as they scan for potential network vulnerabilities and unintended exposures. Setting --trait service.node-port=false reverts the service type to ClusterIP. It would be ideal to apply the 'deny-by-default' approach and create node port-based service objects if explicitly requested.