apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  namespace: default
  name: sensitive-data
  labels:
    task: shred
spec:
  volumeName: VOLUME_NAME
  accessModes: ["ReadWriteOnce"]
  resources:
    requests:
      storage: VOLUME_SIZE