Currently, the encryption test does ip route get $REMOTE_POD_IP to derive an interface which is used to send a request to that pod. However, this might not work on managed K8s (e.g., EKS) in which there might be multiple ifaces depending on a source IP addr (cilium/cilium-cli#1304 (comment)).