Fix endless update when MAC is empty in AllowedAddressPairs

[chenwng]

This PR refines the check of AllowedAddressPairs between resource spec in ORC and actual port state in OpenStack to avoid endless update.

Close #852

[mandre]

Looks good. Could you add new cases to handleAllowedAddressPairsUpdate() to also test when we do not set a MAC address?

[chenwng]

@mandre I updated the test cases, please review it again.

[dlaw4608]

nice one @chenwng, test passes locally as well , LGTM,

[winiciusallan]

Nice one @chenwng!

[mandre]

@dlaw4608 it looks like the gazpacho CI failed because the roleassignment-dependency test is racy in how it checks the project still exists. See how other similar tests use CEL validations instead.

[dlaw4608]

@dlaw4608 it looks like the gazpacho CI failed because the roleassignment-dependency test is racy in how it checks the project still exists. See how other similar tests use CEL validations instead.

PR created, I changed assertion-02.yaml from how the old assertion checked status.conditions, which races with the Project controller updating them during its own deletion flow. Now it it race-free because it only check immutable facts similar to how CEL expressions are used in securitygroup-dependency test.