{
  "properties": {
    "apiVersion": {
      "description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
      "type": "string"
    },
    "kind": {
      "description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
      "type": "string"
    },
    "metadata": {
      "type": "object"
    },
    "spec": {
      "description": "TierSpec contains the specification for a security policy tier resource.",
      "properties": {
        "defaultAction": {
          "description": "DefaultAction specifies the action applied to workloads selected by a policy in the tier,\nbut not rule matched the workload's traffic.\n[Default: Deny]",
          "enum": [
            "Pass",
            "Deny"
          ],
          "type": "string"
        },
        "order": {
          "description": "Order is an optional field that specifies the order in which the tier is applied.\nTiers with higher \"order\" are applied after those with lower order.  If the order\nis omitted, it may be considered to be \"infinite\" - i.e. the tier will be applied\nlast.  Tiers with identical order will be applied in alphanumerical order based\non the Tier \"Name\".",
          "type": "number"
        }
      },
      "type": "object",
      "additionalProperties": false
    }
  },
  "type": "object"
}