You can create a headless service that kuberesolver can use then another service with LoadBalancer, that way you don't disrupt the internal communication and at the same time you are free to use your LB for your apps to connect to spicedb from outside kube cluster.