This message was deleted.

Try putting the ‘my_svc…apply’ block directly in the firewall rule declaration where you currently reference my_nodeport.