tcp stream (und damit: tls passthrough) ist implementiert

pkg/registry/registry.go

@@ -239,9 +239,16 @@ func (r *Registry) evaluate(ctx context.Context, nodeID string, state NodeState)
 			continue
 		}
 		merged = m
-		if maint, ok := workloadMaintenance(w.Labels); ok && c.HTTP != nil {
-			for svc := range c.HTTP.Services {
-				serviceMaint[svc] = maint
+		if maint, ok := workloadMaintenance(w.Labels); ok {
+			if c.HTTP != nil {
+				for svc := range c.HTTP.Services {
+					serviceMaint[svc] = maint
+				}
+			}
+			if c.TCP != nil {
+				for svc := range c.TCP.Services {
+					serviceMaint[svc] = maint
+				}
 			}
 		}
 	}