# svc6
		add element ip kube-proxy no-endpoint-services { 172.30.0.46 . tcp . 80 comment "ns6/svc6:p80" : goto reject-chain }
		`)

	nft := knftables.NewFake(knftables.IPv4Family, "kube-proxy")
	err := nft.ParseDump(rules)
	if err != nil {
		t.Fatalf("failed to parse given nftables rules: %v", err)
	}
	// ensure rules were parsed correctly
	assertNFTablesTransactionEqual(t, getLine(), rules, nft.Dump())