}
	}
	return allErrs
}

// ValidateNetworkPolicy validates a networkpolicy.
func ValidateNetworkPolicy(np *networking.NetworkPolicy, opts NetworkPolicyValidationOptions) field.ErrorList {
	allErrs := apivalidation.ValidateObjectMeta(&np.ObjectMeta, true, ValidateNetworkPolicyName, field.NewPath("metadata"))

            "type": "string"
          }
        },
        "type": "object"
      },
      "io.k8s.api.networking.v1.NetworkPolicy": {
        "description": "NetworkPolicy describes what network traffic is allowed for a set of Pods",
        "properties": {
          "apiVersion": {

// It is controlled by "k8s:prerelease-lifecycle-gen:introduced" tags in types.go.
func (in *NetworkPolicy) APILifecycleIntroduced() (major, minor int) {
	return 1, 7
}

var xxx_messageInfo_IngressTLS proto.InternalMessageInfo

func (m *NetworkPolicy) Reset()      { *m = NetworkPolicy{} }
func (*NetworkPolicy) ProtoMessage() {}
func (*NetworkPolicy) Descriptor() ([]byte, []int) {
	return fileDescriptor_2c41434372fec1d7, []int{19}
}
func (m *NetworkPolicy) XXX_Unmarshal(b []byte) error {
	return m.Unmarshal(b)
}
func (m *NetworkPolicy) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {

                            will be selected by the rule. \n For NetworkPolicy, an
                            empty NamespaceSelector implies that the Selector is limited
                            to selecting only workload endpoints in the same namespace
                            as the NetworkPolicy. \n For NetworkPolicy, `global()`
                            NamespaceSelector implies that the Selector is limited

		{Group: "extensions", Version: "v1beta1", Kind: "ReplicaSetList"}:                                          {},
		{Group: "extensions", Version: "v1beta1", Kind: "NetworkPolicy"}:                                           {},
		{Group: "extensions", Version: "v1beta1", Kind: "NetworkPolicyList"}:                                       {},

              "responseKind": {
                "group": "",
                "kind": "NetworkPolicy",
                "version": ""
              },
              "scope": "Namespaced",
              "shortNames": [
                "netpol"
              ],
              "singularResource": "networkpolicy",
              "verbs": [
                "create",
                "delete",

              "responseKind": {
                "group": "",
                "kind": "NetworkPolicy",
                "version": ""
              },
              "scope": "Namespaced",
              "shortNames": [
                "netpol"
              ],
              "singularResource": "networkpolicy",
              "verbs": [
                "create",
                "delete",

var xxx_messageInfo_IngressTLS proto.InternalMessageInfo

func (m *NetworkPolicy) Reset()      { *m = NetworkPolicy{} }
func (*NetworkPolicy) ProtoMessage() {}
func (*NetworkPolicy) Descriptor() ([]byte, []int) {
	return fileDescriptor_90a532284de28347, []int{27}
}
func (m *NetworkPolicy) XXX_Unmarshal(b []byte) error {
	return m.Unmarshal(b)
}
func (m *NetworkPolicy) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {

	endpointGw        = "EP-GW"
	epIpAddressGw     = "192.168.2.1"
	epMacAddressGw    = "00-11-22-33-44-66"
)

func newHnsNetwork(networkInfo *hnsNetworkInfo) *hcn.HostComputeNetwork {
	var policies []hcn.NetworkPolicy
	for _, remoteSubnet := range networkInfo.remoteSubnets {
		policySettings := hcn.RemoteSubnetRoutePolicySetting{
			DestinationPrefix:           remoteSubnet.destinationPrefix,