Compromise: shorter is better for occupancy and readability.

AllSelector is a pre-calculated copy of the "all()" selector.

ActiveRulesCalculator calculates the set of policies and profiles (i.e.

DataplanePassthru passes through some datamodel updates to the dataplane layer, removing some duplicates along the way.

EndpointKeyToProfileIDMap is a specialised map that calculates the deltas to the profile IDs when making an update.

EventSequencer buffers and coalesces updates from the calculation graph then flushes them when Flush() is called.

ParsedRule is like a backend.model.Rule, except the tag and selector matches and named ports are replaced with pre-calculated ipset IDs.

ParsedRules holds our intermediate representation of either a policy's rules or a profile's rules.

PolicyResolver marries up the active policies with local endpoints and calculates the complete, ordered set of policies that apply to each endpoint.

Note: PolKV is really internal to the calc package.

ProfileDecoder takes updates from a dispatcher, determines if the profile is a Kubernetes Service Account or Kubernetes Namespace, and if it is, generates a dataplane update or remove for it.

RuleScanner scans the rules sent to it by the ActiveRulesCalculator, looking for tags and selectors.