network: support network isolate

Add new crd to convert kubesphere network policy to k8s network policy, and then other network
plugin will do the rest work.

Use  cache.go from calico project's kube-controller,  it aim to  sync nsnp with k8s np, delete unused np, and relieve the pressure on k8s restful client.

If you want higher performance, you can implement interface  NsNetworkPolicyProvider in pkg/controller/provider/namespace_np.go.

Signed-off-by: Duan Jiong <djduanjiong@gmail.com>

vendor/github.com/projectcalico/kube-controllers/pkg/converter/converter.go

@@ -0,0 +1,28 @@
+// Copyright (c) 2017 Tigera, Inc. All rights reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package converter
+
+// Converter Responsible for conversion of given kubernetes object to equivalent calico object
+type Converter interface {
+	// Converts kubernetes object to calico representation of it.
+	Convert(k8sObj interface{}) (interface{}, error)
+
+	// Returns apporpriate key for the object
+	GetKey(obj interface{}) string
+
+	// DeleteArgsFromKey returns name and namespace of the object to pass to Delete
+	// for the given key as generated by GetKey.
+	DeleteArgsFromKey(key string) (string, string)
+}