Document service.spec.Selector limitations

[BRONSOLO]

Do y'all have public docs on the following limitation?

The current version is limited to tracking the services where the service.spec.Selector matches the pod selector in the egress rules.

From:

amazon-network-policy-controller-k8s/pkg/resolvers/endpoints.go

Line 391 in baf54a7

// getMatchingServiceClusterIPs returns the clusterIPs of the services with service.spec.Selector matching the pod selector

This warrants some visibility IMO. Thanks!