Test that KubeMacPool doesn't block SDN recovery

[phoracek]

KubeMacPool is connected to the default Kubernetes network. When the default network pods are getting upgraded we may end up in a dead-lock where pods are waiting for KubeMacPool webhook, but it is inaccessible. We should create a test covering this scenario and fix it accordingly.

#69

[SchSeba]

For new we change the pod policy to Ignore

#69

[SchSeba]

Next work will be to change the kubemacpool to works only on labeled namespaces