in pkg/resolvers/policies_for_pod.go [72:85]
func (r *defaultPolicyReferenceResolver) isPodMatchesPolicySelector(pod *corev1.Pod, podOld *corev1.Pod, policy *networking.NetworkPolicy) bool {
ps, err := metav1.LabelSelectorAsSelector(&policy.Spec.PodSelector)
if err != nil {
r.logger.Info("Unable to get pod label selector from policy", "policy", k8s.NamespacedName(policy), "err", err)
return false
}
if ps.Matches(labels.Set(pod.Labels)) {
return true
}
if podOld != nil && ps.Matches(labels.Set(podOld.Labels)) {
return true
}
return false
}