AllocateCIDRs attempts to allocate identities for a list of CIDRs.

AllocateCIDRsForIPs attempts to allocate identities for a list of CIDRs.

DeleteIPFromKVStore removes the IP->Identity mapping for the specified ip from the kvstore, which will subsequently trigger an event in NewIPIdentityWatcher().

GetIPIdentityMapModel returns all known endpoint IP to security identity mappings stored in the key-value store.

InitIPIdentityWatcher initializes the watcher for ip-identity mapping events in the key-value store.

NewIPCache returns a new IPCache with the mappings of endpoint IP to security identity (and vice-versa) initialized.

NewIPIdentityWatcher creates a new IPIdentityWatcher using the specified kvstore backend.

ReleaseCIDRs releases the identities of a list of CIDRs.

UpsertIPToKVStore updates / inserts the provided IP->Identity mapping into the kvstore, which will subsequently trigger an event in NewIPIdentityWatcher().

WaitForKVStoreSync waits until the ipcache has been synchronized from the kvstore.

DefaultAddressSpace is the address space used if none is provided.

Delete represents deletion of an entry in IPCache.

Upsert represents Upsertion into IPCache.

AddressSpace is the address space (cluster, etc.) in which policy is computed.

IPIdentitiesPath is the path to where endpoint IPs are stored in the key-valuestore.

IPIdentityCache caches the mapping of endpoint IPs to their corresponding security identities across the entire cluster in which this instance of Cilium is running.

Identity is the identity representation of an IP<->Identity cache.

IPCache is a collection of mappings: - mapping of endpoint IP or CIDR to security identities of all endpoints which are part of the same cluster, and vice-versa - mapping of endpoint IP or CIDR to host IP (maybe nil).

IPIdentityWatcher is a watcher that will notify when IP<->identity mappings change in the kvstore.

IPKeyPair is the (IP, key) pair used of the identity.

Implementation represents a concrete datapath implementation of the IPCache which may restrict the ability to apply IPCache mappings, depending on the underlying details of that implementation.

IPIdentityMappingListener represents a component that is interested in learning about IP to Identity mapping events.

CacheModification represents the type of operation performed upon IPCache.