---
title: "List all attackable targets that match the given label selector"
method: POST
path: "/kubernetes/targets/by-selector"
tags: ["kubernetes.targets"]
---

# List all attackable targets that match the given label selector

`POST /kubernetes/targets/by-selector`

Requires the privilege [`CLIENTS_READ`](https://www.gremlin.com/docs/user-management/access-control/#privileges)

## Query parameters

- `teamId` string, required

## Request body

- LabelSelection
  - `labelSelector` string, required
  - `clusterId` string, required
  - `allNamespaces` boolean
  - `namespaces` string[]

## Response `default`

default response

## Other responses

- `401` — Authorization header missing or malformed. Please provide proper credentials in the authorization header.
- `403` — User requires privilege for target team: CLIENTS_READ

---

[API](https://skmtc.net/gremlin/apis/gremlin-api.md) · [All operations](https://skmtc.net/gremlin/apis/gremlin-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/gremlin/gremlin-api/revisions/36ee938323f0/schema)