fix(nsc): properly check hairpinning rule

Previously, we would iterate over rulesFromNode, but then check it
against the entirety of the rulesNeeded hash. This resulted in the loop
breaking as soon as it found any matching rule from the host rather than
it breaking if it matched the rule that we were currently processing.

pkg/controllers/proxy/network_services_controller.go

@@ -1423,11 +1423,11 @@ func (nsc *NetworkServicesController) syncHairpinIptablesRules() error {
 	}
 
 	// Apply the rules we need
-	for _, ruleArgs := range rulesNeeded {
+	for rule, ruleArgs := range rulesNeeded {
 		ruleExists := false
 		for _, ruleFromNode := range rulesFromNode {
-			_, ruleExists = rulesNeeded[ruleFromNode]
-			if ruleExists {
+			if rule == ruleFromNode {
+				ruleExists = true
 				break
 			}
 		}