chaining: source security ID in hairpin might lead to policy denies in >=v1.7.4 #12136
Description
Bisecting blame 60b4210
xx drop (Policy denied) flow 0x53352ab to endpoint 694, identity 4417->56410: 172.16.166.201:53662 -> 172.16.166.200:80 tcp SYN
The security ID in the endpoint is different from the one being generated by the datapath:
ENDPOINT POLICY (ingress) POLICY (egress) IDENTITY LABELS (source:key[=value]) IPv6 IPv4 STATUS
ENFORCEMENT ENFORCEMENT
366 Disabled Disabled 4428 k8s:class=tiefighter 172.16.166.201 ready
k8s:io.cilium.k8s.policy.cluster=default
k8s:io.cilium.k8s.policy.serviceaccount=default
k8s:io.kubernetes.pod.namespace=default
k8s:org=empire