func()

in pkg/resolvers/policies_for_pod.go [72:85]


func (r *defaultPolicyReferenceResolver) isPodMatchesPolicySelector(pod *corev1.Pod, podOld *corev1.Pod, policy *networking.NetworkPolicy) bool {
	ps, err := metav1.LabelSelectorAsSelector(&policy.Spec.PodSelector)
	if err != nil {
		r.logger.Info("Unable to get pod label selector from policy", "policy", k8s.NamespacedName(policy), "err", err)
		return false
	}
	if ps.Matches(labels.Set(pod.Labels)) {
		return true
	}
	if podOld != nil && ps.Matches(labels.Set(podOld.Labels)) {
		return true
	}
	return false
}