{
  "properties": {
    "spec": {
      "description": "NetworkAuthentication defines a list of authenticated client networks to be referenced by an `AuthorizationPolicy`. If a client connection originates from ANY of the of the provided networks, the connection is considered authenticated.",
      "properties": {
        "networks": {
          "items": {
            "properties": {
              "cidr": {
                "description": "The CIDR of the network to be authorized.",
                "type": "string"
              },
              "except": {
                "description": "A list of IP networks/addresses not to be included in the above `cidr`.",
                "items": {
                  "type": "string"
                },
                "type": "array"
              }
            },
            "required": [
              "cidr"
            ],
            "type": "object",
            "additionalProperties": false
          },
          "type": "array"
        }
      },
      "required": [
        "networks"
      ],
      "type": "object",
      "additionalProperties": false
    }
  },
  "required": [
    "spec"
  ],
  "type": "object"
}