apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: oneimage-app-name-app-namespace-1234567890ab
  labels:
    acorn.io/app-name: app-name
    acorn.io/app-namespace: app-namespace
    acorn.io/managed: "true"
    acorn.io/container-name: oneimage
rules:
- apiGroups:
  - foo.io
  resources:
  - bar
  verbs:
  - create
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: twoimage-app-name-app-namespace-1234567890ab
  labels:
    acorn.io/app-name: app-name
    acorn.io/app-namespace: app-namespace
    acorn.io/managed: "true"
    acorn.io/container-name: twoimage
rules:
- apiGroups:
  - foo.io
  resources:
  - bar
  verbs:
  - put
