Diagnose a network path

Where: network → debugger, with supporting resource pages under network. Reads may require Services, Endpoints/EndpointSlices, Pods, Ingress, Gateway API, and NetworkPolicy.

1. Select context, namespace, source, and destination explicitly.
2. Check Service selectors and useful endpoint addresses before policy analysis.
3. Inspect ingress and egress policy peers, ports, named-port resolution, and namespace selectors.
4. Treat denied or missing sources as unknown. Cross-namespace Gateway behavior depends on installed APIs and grants.

The result is configuration-based reasoning, not a packet trace or connectivity proof. Verify runtime behavior with approved tools outside Lumen when needed.

Source: src/routes/cluster/NetworkDebuggerView.tsx, src-tauri/src/k8s/debug.rs, src/routes/cluster/ClusterWorkspace.tsx at v0.18.0.