As per task, from IRC:
<jayme> godog: could you add a todo somewhere to remove the nodeport from the otel-collector deployment? it's not required anymore and it's not protected by things like networkpolicies
It's probably enough to set .Values.service.type: ClusterIP in helmfile.d/services/opentelemetry-collector/values.yaml