containers: {
  "rootapp": {
      image: "ghcr.io/acorn-io/images-mirror/nginx:latest"
      permissions: rules: [{
        verbs: ["get"]
        apiGroups: ["foo.bar.com"]
      }]
  }
  
}

acorns: foo: image: "%REPLACE_IMAGE%"

