Configures agentk to know when to talk to canary

QA tests run against canary when the environment var
QA_COOKIES="gitlab_canary=true" is set. Up to now, agentk was always
talking to the non-canary infrastructure even if this cookie was set.

With this change we tell kas to add a canary cookie to its requests so
that its requests get redirected to the KAS canary server.

Issue: https://gitlab.com/gitlab-com/gl-infra/delivery/-/issues/2557

qa/qa/fixtures/kubernetes_agent/agentk-manifest.yaml.erb

@@ -25,9 +25,26 @@ spec:
             - --token-file=/config/token
             - --kas-address
             - "<%= kas_wss_address %>"
+            <% if QA::Runtime::Env.qa_cookies.to_s.include?("gitlab_canary=true") %>
+            - --kas-header
+            - "Cookie: gitlab_canary=true"
+            <% end %>
           volumeMounts:
             - name: token-volume
               mountPath: /config
+          env:
+            - name: POD_NAMESPACE
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.namespace
+            - name: POD_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.name
+            - name: SERVICE_ACCOUNT_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.serviceAccountName
       volumes:
         - name: token-volume
           secret:

qa/qa/runtime/env.rb

@@ -431,7 +431,7 @@ def geo_environment?
       end
 
       def gitlab_agentk_version
-        ENV.fetch('GITLAB_AGENTK_VERSION', 'v14.5.0')
+        ENV.fetch('GITLAB_AGENTK_VERSION', 'fe716ea')
       end
 
       def transient_trials