levaliciousandClaude Opus 5.5 b413f2a5f8 lb: a failed pass blocks pod admission only where EgressServices exist ...

With no EgressService and no member rules installed, an admission has
nothing to protect or clean up, so a failing pass (a datapath bug, a
bridge not yet addressed) answers "not a member" instead of stopping
every pod on the node from starting. Wherever EgressServices exist,
admission still fails closed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UHXzGrsxfkGk8LmwrBbHNZ

2026-10-13 14:40:32 -04:00

..

admit

lb: EgressService - a LoadBalancer Service's pods leave from its address

2026-10-13 14:39:44 -04:00

addresses.go

lb: LoadBalancer Services from addresses nodes hold, client address kept

2026-10-13 12:45:54 -04:00

controller.go

lb: a failed pass blocks pod admission only where EgressServices exist

2026-10-13 14:40:32 -04:00

datapath.go

lb: EgressService - a LoadBalancer Service's pods leave from its address

2026-10-13 14:39:44 -04:00

egress_api.go

lb: EgressService - a LoadBalancer Service's pods leave from its address

2026-10-13 14:39:44 -04:00

egress_datapath.go

lb: EgressService - a LoadBalancer Service's pods leave from its address

2026-10-13 14:39:44 -04:00

egress_test.go

lb: EgressService - a LoadBalancer Service's pods leave from its address

2026-10-13 14:39:44 -04:00

egress.go

lb: EgressService - a LoadBalancer Service's pods leave from its address

2026-10-13 14:39:44 -04:00

model_test.go

lb: EgressService - a LoadBalancer Service's pods leave from its address

2026-10-13 14:39:44 -04:00

model.go

lb: LoadBalancer Services from addresses nodes hold, client address kept

2026-10-13 12:45:54 -04:00