cilium + macvlan/sriov standalone：client of outside the cluster cannot access the NodePort service

[cyclinder]

What happend:

cilium + macvlan/sriov standalone：client of outside the cluster cannot access the NodePort service

What you expected to happen:

works

How to reproduce it (as minimally and precisely as possible):

Anything else we need to know?:

Environment:

image path and image ID (from 'docker images')

• Kubernetes version (use kubectl version):
• Primary CNI for Kubernetes cluster:
• NetworkAttachment info (use kubectl get net-attach-def -o yaml)
• Target pod yaml info (with annotation, use kubectl get pod <podname> -o yaml)

[github-actions]

Hi @cyclinder, Thanks for opening an issue! Please use '/'(for example: /bug) to label this issue.

[cyclinder]