Kubernetes service haproxy-replicas is created by default for every newly provisioned cluster. It listens on port 3307 and sends the queries to all PXC nodes in a round-robin fashion.

Nothing is stopping users to use this service for writes, but that is dangerous and wrong because will generate a lot of certification conflicts and BF abort given it will distribute writes all over the cluster impacting on performance as well.

We will add a flag to allow users to disable this service it if needed.