# L1 Torah Filesystem — Read-Only Volume
# Construction spec §1.2: SHA-256 verified, mounted read-only
#
# In production, L1 is a read-only filesystem (squashfs or similar)
# containing the Torah text. It is mounted into all pods that need it.
#
# For Exoscale SKS, this uses a PersistentVolume backed by
# Exoscale Block Storage. The L1 data is loaded once and never modified.
#
# Step 34: Mount L1 filesystem read-only
---
apiVersion: v1
kind: PersistentVolume
metadata:
  name: l1-torah-pv
  labels:
    app.kubernetes.io/name: l1-torah
spec:
  capacity:
    storage: 1Gi
  accessModes:
    - ReadOnlyMany
  persistentVolumeReclaimPolicy: Retain
  # For initial setup, use hostPath. In production, replace with
  # Exoscale Block Storage CSI or pre-loaded ConfigMap/Secret.
  hostPath:
    path: /mnt/torah
    type: DirectoryOrCreate
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: l1-torah-pvc
  namespace: shorashim
spec:
  accessModes:
    - ReadOnlyMany
  resources:
    requests:
      storage: 1Gi
  selector:
    matchLabels:
      app.kubernetes.io/name: l1-torah