pub fn pleme_program_selector(program: &str) -> BTreeMap<&'static str, String>Expand description
Build the canonical Cilium matchLabels selector for a single
pleme-io program without the Aplicacao constraint —
deliberately broader than pleme_program_in_aplicacao_selector
for the cases where matching a program across every Aplicacao that
hosts it is the intent (cluster-wide rate limits, breakglass
observability, the per-cluster operator identity scope).
Prefer pleme_program_in_aplicacao_selector for typed
per-Aplicacao mesh emission — using pleme_program_selector there
would let a policy unintentionally match a same-named program in
a different Aplicacao. Both helpers exist so the caller’s intent
(Aplicacao-scoped vs. cluster-wide) is named at the call site,
not buried in inline label-key string literals.