kind: AppInstance
apiVersion: internal.acorn.io/v1
metadata:
  name: app-name
  namespace: app-namespace
  uid: 1234567890abcdef
spec:
  annotations:
    - key: allowed-global.io
      value: test-global
    - key: admit-scoped.io
      resourceType: container
      value: test-container
    - key: allowed-scoped.io
      resourceName: foo
      value: test-named
    - key: admit-scoped.io
      resourceType: volume
      value: test-volume
    - key: admit-scoped.io
      resourceType: secret
      value: test-secret
  image: test
  labels:
    - key: allowed-global.io
      value: test-global
    - key: permit-scoped.io
      resourceType: container
      value: test-container
    - key: permit-scoped.io
      resourceName: foo
      value: test-named
    - key: allowed-scoped.io
      resourceType: volume
      value: test-volume
    - key: allowed-scoped.io
      resourceType: secret
      value: test-secret
status:
  namespace: app-created-namespace
  appImage:
    id: test
  appSpec:
    annotations:
      allowed.io: test-allowed-app-spec-ann
      admit.io: test-admit-app-spec-ann
    containers:
      container-name:
        annotations:
          allowed-container.io: test-allowed-container-ann
        image: "image-name"
        labels:
          permit-container.io: test-permit-container-label
        dirs:
          "/var/tmp":
            volume: foo
    labels:
      allowed.io: test-allowed-app-spec-label
      permit.io: test-permit-app-spec-label
    jobs:
      job-name:
        annotations:
          admit-job.io: test-admit-job-ann
        ports:
          - port: 80
            targetPort: 81
            protocol: http
        image: "image-name"
        labels:
          allowed-job.io: test-allowed-job-label
        build:
          dockerfile: "Dockerfile"
          context: "."
    volumes:
      foo: {}
  conditions:
    - type: defined
      reason: Success
      status: "True"
      success: true
---
