---
kind: ServiceAccount
apiVersion: v1
metadata:
  name: create-only
  namespace: app-created-namespace
  annotations:
    acorn.io/app-generation: "1"
  labels:
    acorn.io/app-name: app-name
    acorn.io/app-public-name: "app-name"
    acorn.io/app-namespace: app-namespace
    acorn.io/managed: "true"
    acorn.io/job-name: "create-only"
---
kind: Job
apiVersion: batch/v1
metadata:
  name: create-only
  namespace: app-created-namespace
  annotations:
    acorn.io/app-generation: "1"
    apply.acorn.io/prune: "false"
    apply.acorn.io/update: "true"
  labels:
    "acorn.io/app-namespace": "app-namespace"
    "acorn.io/app-name": "app-name"
    acorn.io/app-public-name: "app-name"
    "acorn.io/job-name": "create-only"
    "acorn.io/managed": "true"
spec:
  backoffLimit: 1000
  template:
    metadata:
      labels:
        "acorn.io/app-namespace": "app-namespace"
        "acorn.io/app-name": "app-name"
        acorn.io/app-public-name: "app-name"
        "acorn.io/job-name": "create-only"
        "acorn.io/managed": "true"
      annotations:
        acorn.io/app-generation: "1"
        acorn.io/container-spec: '{"events":["create"],"image":"create-only-image","probes":null}'
    spec:
      imagePullSecrets:
        - name: create-only-pull-1234567890ab
      restartPolicy: Never
      serviceAccountName: create-only
      enableServiceLinks: false
      terminationGracePeriodSeconds: 5
      containers:
        - name: create-only
          image: "create-only-image"
          terminationMessagePath: "/run/secrets/output"
          env:
            - name: ACORN_EVENT
              value: "create"
---
kind: Secret
apiVersion: v1
metadata:
  name: create-only-pull-1234567890ab
  namespace: app-created-namespace
  labels:
    acorn.io/managed: "true"
    acorn.io/pull-secret: "true"
type: "kubernetes.io/dockerconfigjson"
data:
  ".dockerconfigjson": eyJhdXRocyI6eyJpbmRleC5kb2NrZXIuaW8iOnsiYXV0aCI6Ik9nPT0ifX19