kubernetes/staging/src/k8s.io/apiserver/pkg/admission/plugin/webhook/predicates/object/matcher.go

type ObjectSelectorProvider …

type Matcher …

func matchObject(obj runtime.Object, selector labels.Selector) bool { … }

// MatchObjectSelector decideds whether the request matches the ObjectSelector
// of the webhook. Only when they match, the webhook is called.
func (m *Matcher) MatchObjectSelector(p ObjectSelectorProvider, attr admission.Attributes) (bool, *apierrors.StatusError) { … }