An egress policy rollout using Cilium FQDN rules permits bootstrap traffic...

The domain was allowed once, yet the runtime path no longer has the cached FQDN observation needed to keep the connection flowing after bootstrap.