NewConstraint creates a new SCC constraint admission plugin.

ParseRejectAdmitCIDRRules calculates a blacklist and whitelist from a list of string CIDR rules (treating a leading ! as a negation).

NetworkSlice is a helper for checking whether an IP is contained in a range of networks.