description: One or more labels that indicate a specific set of
                      pods/VMs on which the configuration should be applied.
                    maxProperties: 256
                    type: object
                type: object
            type: object
            x-kubernetes-validations:
            - message: only one of targetRefs or workloadSelector can be set