# PersistentVolumeClaim for Keycloak (namespace: sso)
#
# keycloak-data — /opt/keycloak/data
#   Holds: Keycloak build cache (data/generated/) produced by kc.sh build.
#   Persisting this avoids a full provider rebuild on every pod restart.
#   Also holds H2 emergency data (only used if PostgreSQL is unreachable).
#
# Adjust storage size before production deployment.

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: keycloak-data
  namespace: sso
  labels:
    app.kubernetes.io/part-of: net-kingdom-sso-mfa
    net-kingdom/component: sso
spec:
  accessModes: [ReadWriteOnce]
  resources:
    requests:
      storage: 2Gi