code: func (r *RoleV3) GetNodeLabels(rct RoleConditionType) Labels {
  	if rct == Allow {
  		return r.Spec.Allow.NodeLabels
  	}
  	return r.Spec.Deny.NodeLabels
  }
docs: // GetNodeLabels gets the map of node labels this role is allowed or denied access to.