Allow an empty service selector

Services that wish to maintain their own endpoints can specify an empty pod selector.  The controller now ignores services without a selector when setting endpoints.  The kubernetes and kubernetes-ro services now have empty selectors to reflect this.

Fixes #2358