# Copy to secret.yaml, fill in a real password, and apply with:
#   kubectl apply -f secret.yaml
# Never commit the filled-in secret.yaml to git.
#
# This is the Postgres superuser used to provision one database per
# application (see create-db-*-job.yaml). Applications connect with these
# same credentials against their own database (no per-app roles for now).
apiVersion: v1
kind: Secret
metadata:
  name: postgres-admin
  namespace: postgres
type: Opaque
stringData:
  POSTGRES_USER: postgres
  POSTGRES_PASSWORD: changeme