Pods need to match all the labels in the Service selector to be a target.
Services call the target Pods endpoints, and so does Kubectl :)
endpoints
Need more? Here's the solution.