{
  "properties": {
    "apiVersion": {
      "description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
      "type": "string"
    },
    "kind": {
      "description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
      "type": "string"
    },
    "metadata": {
      "type": "object"
    },
    "spec": {
      "description": "IPPoolSpec contains the specification for an IPPool resource.",
      "properties": {
        "allowedUses": {
          "description": "AllowedUse controls what the IP pool will be used for.  If not specified or empty, defaults to\n[\"Tunnel\", \"Workload\"] for back-compatibility",
          "items": {
            "type": "string"
          },
          "type": "array"
        },
        "assignmentMode": {
          "description": "Determines the mode how IP addresses should be assigned from this pool",
          "enum": [
            "Automatic",
            "Manual"
          ],
          "type": "string"
        },
        "blockSize": {
          "description": "The block size to use for IP address assignments from this pool. Defaults to 26 for IPv4 and 122 for IPv6.",
          "type": "integer"
        },
        "cidr": {
          "description": "The pool CIDR.",
          "type": "string"
        },
        "disableBGPExport": {
          "description": "Disable exporting routes from this IP Pool's CIDR over BGP. [Default: false]",
          "type": "boolean"
        },
        "disabled": {
          "description": "When disabled is true, Calico IPAM will not assign addresses from this pool.",
          "type": "boolean"
        },
        "ipip": {
          "description": "Deprecated: this field is only used for APIv1 backwards compatibility.\nSetting this field is not allowed, this field is for internal use only.",
          "properties": {
            "enabled": {
              "description": "When enabled is true, ipip tunneling will be used to deliver packets to\ndestinations within this pool.",
              "type": "boolean"
            },
            "mode": {
              "description": "The IPIP mode.  This can be one of \"always\" or \"cross-subnet\".  A mode\nof \"always\" will also use IPIP tunneling for routing to destination IP\naddresses within this pool.  A mode of \"cross-subnet\" will only use IPIP\ntunneling when the destination node is on a different subnet to the\noriginating node.  The default value (if not specified) is \"always\".",
              "type": "string"
            }
          },
          "type": "object",
          "additionalProperties": false
        },
        "ipipMode": {
          "description": "Contains configuration for IPIP tunneling for this pool. If not specified,\nthen this is defaulted to \"Never\" (i.e. IPIP tunneling is disabled).",
          "type": "string"
        },
        "nat-outgoing": {
          "description": "Deprecated: this field is only used for APIv1 backwards compatibility.\nSetting this field is not allowed, this field is for internal use only.",
          "type": "boolean"
        },
        "natOutgoing": {
          "description": "When natOutgoing is true, packets sent from Calico networked containers in\nthis pool to destinations outside of this pool will be masqueraded.",
          "type": "boolean"
        },
        "nodeSelector": {
          "description": "Allows IPPool to allocate for a specific node by label selector.",
          "type": "string"
        },
        "vxlanMode": {
          "description": "Contains configuration for VXLAN tunneling for this pool. If not specified,\nthen this is defaulted to \"Never\" (i.e. VXLAN tunneling is disabled).",
          "type": "string"
        }
      },
      "required": [
        "cidr"
      ],
      "type": "object",
      "additionalProperties": false
    }
  },
  "type": "object"
}