---
# The report store: state.json (firstSeenAt, failed-since, heartbeat, last complete run) and
# report.json. 1Gi on the replicated tier is generous for two JSON files; it is DELIBERATELY NOT where
# the vulnerability database or the per-image scan caches live, because etcd and Longhorn share a
# partition on every node (docs/02, docs/17 "Load"). Those are on the size-limited /cache emptyDir.
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: vuln-scanner-data
  namespace: vuln-scanner
  labels:
    app.kubernetes.io/name: vuln-scanner
spec:
  accessModes:
    - ReadWriteOnce
  storageClassName: longhorn
  resources:
    requests:
      storage: 1Gi