test: fix ClusterIP IPv6 connectivity checks
test: fix ClusterIP IPv6 connectivity checks

From time to time in our CI connectivity to {tftp,http}://[fd03::100]/ failed.

Related service map dump looks like:

  [...]
  10069   [fd03::100]:69         ClusterIP      1 => [f00d::a0b:0:0:eb33]:69
                                                2 => [f00d::a0b:0:0:ce1a]:69
                                                3 => [f00d::a0b:0:0:3d75]:69
  10080   [fd03::100]:80         ClusterIP      1 => [f00d::a0b:0:0:3d75]:80
                                                2 => [f00d::a0b:0:0:eb33]:80
                                                3 => [f00d::a0b:0:0:ce1a]:80
  20069   [fd03::200]:69         ClusterIP      1 => [f00d::a0c:0:0:172d]:69
  20080   [fd03::200]:80         ClusterIP      1 => [f00d::a0c:0:0:172d]:80
  [...]

And endpoint list:

  ENDPOINT   POLICY (ingress)   POLICY (egress)   IDENTITY   LABELS (source:key[=value])                            IPv6                 IPv4          STATUS
             ENFORCEMENT        ENFORCEMENT
  [...]
  45         Disabled           Disabled          27884      k8s:id=app1                                            f00d::a0b:0:0:ce1a   10.10.0.178   ready
                                                             k8s:io.cilium.k8s.policy.cluster=default
                                                             k8s:io.cilium.k8s.policy.serviceaccount=default
                                                             k8s:io.kubernetes.pod.namespace=external-ips-test
  510        Disabled           Disabled          12623      k8s:id=app1                                            f00d::a0b:0:0:3d75   10.10.0.105   ready
                                                             k8s:io.cilium.k8s.policy.cluster=default
                                                             k8s:io.cilium.k8s.policy.serviceaccount=app1-account
                                                             k8s:io.kubernetes.pod.namespace=default
                                                             k8s:zgroup=testapp
  688        Disabled           Disabled          12623      k8s:id=app1                                            f00d::a0b:0:0:eb33   10.10.0.126   ready
                                                             k8s:io.cilium.k8s.policy.cluster=default
                                                             k8s:io.cilium.k8s.policy.serviceaccount=app1-account
                                                             k8s:io.kubernetes.pod.namespace=default
                                                             k8s:zgroup=testapp
  [...]

As can be seen the selection based on `k8s:id=app1` is not sufficient as
Cilium label selector works slightly different than K8s label selector in
that the former needs to specify the K8s namespace. Hence, for the IPv6
tests, add `k8s:io.kubernetes.pod.namespace=default` namespace selector.

Fixes: d1a61479eae3 ("test/k8s: Add tests for same-node IPv6 service connectivity")
Fixes: a6c62bae969c ("test/k8s: Test IPv6 ClusterIP service connectivity across nodes")
Signed-off-by: Daniel Borkmann <3d0f3b9ddcacec30c4008c5e030e6c13a478cb4f@iogearbox.net>

tgraf/cilium,tklauser/cilium,michi-covalent/cilium,michi-covalent/cilium,tklauser/cilium,tgraf/cilium,tklauser/cilium,tgraf/cilium,cilium/cilium,tgraf/cilium,tklauser/cilium,michi-covalent/cilium,cilium/cilium,cilium-team/cilium,cilium/cilium,tgraf/cilium,tklauser/cilium,michi-covalent/cilium,cilium/cilium,cilium-team/cilium,cilium/cilium,michi-covalent/cilium,tgraf/cilium