fix(multiplayer): authenticate Agones Kubernetes API

deploy/k8s/base/network-policies.yaml

@@ -47,13 +47,6 @@ spec:
       ports:
         - protocol: TCP
           port: 6379
-    - to:
-        - namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: agones-system
-      ports:
-        - protocol: TCP
-          port: 443
     - ports:
         - protocol: UDP
           port: 53
@@ -130,11 +123,10 @@ spec:
       ports:
         - protocol: TCP
           port: 5432
-    - to:
-        - namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: agones-system
-      ports:
+    # The kubernetes.default Service endpoint is implementation-specific and
+    # may be a control-plane/node IP that cannot be selected by pod labels.
+    # Keep API egress portable while limiting it to TLS only.
+    - ports:
         - protocol: TCP
           port: 443
     - ports: