code: func (secrets *Secrets) Query(labels map[string]string) ([]*rspb.Release, error) {
  	ls := kblabels.Set{}
  	for k, v := range labels {
  		if errs := validation.IsValidLabelValue(v); len(errs) != 0 {
  			return nil, fmt.Errorf("invalid label value: %q: %s", v, strings.Join(errs, "; "))
  		}
  		ls[k] = v
  	}
  
  	opts := metav1.ListOptions{LabelSelector: ls.AsSelector().String()}
  
  	list, err := secrets.impl.List(opts)
  	if err != nil {
  		secrets.Log("query: failed to query with labels: %s", err)
  		return nil, err
  	}
  
  	if len(list.Items) == 0 {
  		return nil, storageerrors.ErrReleaseNotFound(labels["NAME"])
  	}
  
  	var results []*rspb.Release
  	for _, item := range list.Items {
  		rls, err := decodeRelease(string(item.Data["release"]))
  		if err != nil {
  			secrets.Log("query: failed to decode release: %s", err)
  			continue
  		}
  		results = append(results, rls)
  	}
  	return results, nil
  }
docs: // Query fetches all releases that match the provided map of labels.
  // An error is returned if the secret fails to retrieve the releases.