unkinben e0bd3973ed Support externalTrafficPolicy on the client Service ...

Adds BindCluster.spec.service.externalTrafficPolicy so DNS LoadBalancers
can preserve client source IPs (Local), which the source-IP ACLs on the
authoritative/resolver need to actually restrict external clients (Cluster
SNATs everything to node IPs).

- api: ClusterServiceSpec.externalTrafficPolicy (enum Cluster;Local)
- set it on the client Service for LoadBalancer/NodePort types
- regenerate CRDs + install.yaml

2026-07-04 22:15:22 +10:00

..

v1alpha1

Support externalTrafficPolicy on the client Service

2026-07-04 22:15:22 +10:00