---
apiVersion: v1
kind: ServiceAccount
metadata:
  namespace: immich
  name: immich
...
---
apiVersion: v1
kind: Secret
type: kubernetes.io/service-account-token
metadata:
  name: serviceaccounttoken
  namespace: immich
  annotations:
    kubernetes.io/service-account.name: "immich"
...
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: immich
  namespace: immich
spec:
  accessModes:
    - ReadWriteOnce
  storageClassName: longhorn-encrypted-retain
  resources:
    requests:
      storage: 50Gi
...