Tailscale proxy in k8s with cilium works with pod not with svc?

[farcaller]

I’ve just had this fight with calico in ebpf mode and I wonder if it’s because cilium can’t parse the tailscale0 packets being an L3 interface and lacking the eth header.