NewIPSetMetadata is used for controllers to send in skeleton ipsets to DP.

NewTranslatedIPSet creates TranslatedIPSet.

IPSet Modes - ApplyAllIPSets: - all ipsets are added to the kernel - ipsets are removed from the kernel when they are deleted from the cache - creates empty ipsets - adds empty/unreferenced ipsets to the toDelete cache periodically - ApplyOnNeed: - ipsets are added to the kernel when they are referenced by network policies or lists in the kernel - ipsets are removed from the kernel when they no longer have a reference - removes empty/unreferenced ipsets from the cache periodically */.

IPSet Modes - ApplyAllIPSets: - all ipsets are added to the kernel - ipsets are removed from the kernel when they are deleted from the cache - creates empty ipsets - adds empty/unreferenced ipsets to the toDelete cache periodically - ApplyOnNeed: - ipsets are added to the kernel when they are referenced by network policies or lists in the kernel - ipsets are removed from the kernel when they no longer have a reference - removes empty/unreferenced ipsets from the cache periodically */.

CIDRBlocks holds CIDR blocks.

EmptyHashSet is a set meant to have no members.

HashSet is of kind hashset with members as IPs and/or port.

KeyLabelOfNamespace IPSet is a list kind ipset with members as ipsets of namespace with this Label Key.

KeyLabelOfPod IPSet contains IPs of Pods with this Label Key.

KeyValueLabelOfNamespace IPSet is a list kind ipset with members as ipsets of namespace with this Label.

KeyValueLabelOfPod IPSet contains IPs of Pods with this Label.

ListSet is of kind list with members as other IPSets.

NamedPorts IPSets contains a given namedport.

Namespace IPSet is created to hold ips of pods in a given NameSapce.

NestedLabelOfPod is derived for multivalue matchexpressions.

Possible ReferenceTypes.

Possible ReferenceTypes.

Unknown const for unknown string.

UnknownKind is returned when kind is unknown.

Unknown SetType.

ErrIPSetInvalidKind is returned when IPSet kind is invalid.

TODO deprecate the TestSet type and replace TestNSSet etc.

TranslatedIPSet is created by translation engine and provides IPSets used in network policy.

ReferenceType specifies the kind of reference for an IPSet.