first commit

k8s/postgres/secret.example.yaml

@@ -0,0 +1,16 @@
+# Copy to secret.yaml, fill in a real password, and apply with:
+#   kubectl apply -f secret.yaml
+# Never commit the filled-in secret.yaml to git.
+#
+# This is the Postgres superuser used to provision one database per
+# application (see create-db-*-job.yaml). Applications connect with these
+# same credentials against their own database (no per-app roles for now).
+apiVersion: v1
+kind: Secret
+metadata:
+  name: postgres-admin
+  namespace: postgres
+type: Opaque
+stringData:
+  POSTGRES_USER: postgres
+  POSTGRES_PASSWORD: changeme