Feel free to put this back on me if it makes sense.

With the SSH tunneling solution available, the API server no longer creates NodePorts for services when usin the ingress load balancer. The UI is only displaying the endpoint link if NodePort is present:

https://github.com/nds-org/ndslabs/blob/master/gui/js/app/dashboard/dashboard.html#L116

I've made a container-local change on the test cluster:

https://www.test.nationaldataservice.org/

Either we need to not check for nodePort or I need to be creating NodePorts for all services.