secret.json

{
    "apiVersion": "v1",
    "kind": "Secret",
    "metadata": {
    	"name": "pgprimary-secret",
        "labels": {
            "cleanup": "$CCP_NAMESPACE-secret"
        }
    },
    "data": {
        "username": "cHJpbWFyeXVzZXI=",
        "password": "cGFzc3dvcmQ="
    }
}

{
    "apiVersion": "v1",
    "kind": "Secret",
    "metadata": {
        "name": "pgroot-secret",
        "labels": {
            "cleanup": "$CCP_NAMESPACE-secret"
        }
    },
    "data": {
        "username": "cG9zdGdyZXM=",
        "password": "cGFzc3dvcmQ="
    }
}

{
    "apiVersion": "v1",
    "kind": "Secret",
    "metadata": {
    	"name": "pguser-secret",
        "labels": {
            "cleanup": "$CCP_NAMESPACE-secret"
        }
    },
    "data": {
        "username": "cGd1c2VyMQ==",
        "password": "cGFzc3dvcmQ="
    }
}

{
    "kind": "Service",
    "apiVersion": "v1",
    "metadata": {
        "name": "secret",
        "labels": {
            "name": "secret",
            "cleanup": "$CCP_NAMESPACE-secret"
        }
    },
    "spec": {
        "ports": [
            {
                "protocol": "TCP",
                "port": 5432,
                "targetPort": 5432,
                "nodePort": 0
            }
        ],
        "selector": {
            "name": "secret"
        },
        "type": "ClusterIP",
        "sessionAffinity": "None"
    },
    "status": {
        "loadBalancer": {}
    }
}

{
    "kind": "Pod",
    "apiVersion": "v1",
    "metadata": {
        "name": "secret",
        "labels": {
            "name": "secret",
            "cleanup": "$CCP_NAMESPACE-secret"
        }
    },
    "spec": {
        "securityContext": {
           $CCP_SECURITY_CONTEXT
        	},
        "containers": [
            {
                "name": "postgres",
                "image": "$CCP_IMAGE_PREFIX/crunchy-postgres:$CCP_IMAGE_TAG",
                "readinessProbe": {
                    "exec": {
                        "command": [
                            "/opt/cpm/bin/readiness.sh"
                        ]
                    },
                    "initialDelaySeconds": 10,
                    "timeoutSeconds": 1
                },
                "livenessProbe": {
                    "exec": {
                        "command": [
                            "/opt/cpm/bin/liveness.sh"
                        ]
                    },
                    "initialDelaySeconds": 120,
                    "timeoutSeconds": 1
                },
                "ports": [
                    {
                        "containerPort": 5432,
                        "protocol": "TCP"
                    }
                ],
                "env": [
                    {
                        "name": "PG_PRIMARY_PORT",
                        "value": "5432"
                    },
                    {
                        "name": "PGHOST",
                        "value": "/tmp"
                    },
                    {
                        "name": "PG_MODE",
                        "value": "primary"
                    },
                    {
                        "name": "PG_DATABASE",
                        "value": "userdb"
                    },
                    {
                        "name": "PG_USER",
                        "valueFrom": {
                            "secretKeyRef": {
                                "name": "pguser-secret",
                                "key": "username"
                            }
                        }
                    }
                ],
                "volumeMounts": [
                    {
                        "mountPath": "/pgdata",
                        "name": "pgdata",
                        "readOnly": false
                    },
                    {
                        "mountPath": "/pguser",
                        "name": "pguser-volume"
                    },
                    {
                        "mountPath": "/pgprimary",
                        "name": "pgprimary-volume"
                    },
                    {
                        "mountPath": "/pgroot",
                        "name": "pgroot-volume"
                    }
                ]
            }
        ],
        "volumes": [
            {
                "name": "pgdata",
                "emptyDir": {
			    "medium": "Memory"
			}
            },
            {
                "name": "pguser-volume",
                "secret": {
                    "secretName": "pguser-secret"
                }
            },
            {
                "name": "pgprimary-volume",
                "secret": {
                    "secretName": "pgprimary-secret"
                }
            },
            {
                "name": "pgroot-volume",
                "secret": {
                    "secretName": "pgroot-secret"
                }
            }
        ]
    }
}