apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - postgresql.yaml # passwordpusher-db-secret-sealed.yaml must be created separately: # 1. Create a Secret with keys: DATABASE_URL, pgusername, pgpassword # (DATABASE_URL must be: postgresql://:@passwordpusher-postgresql:5432/passwordpusher) # 2. Seal it with kubeseal targeting the passwordpusher namespace # 3. Add the resulting file here as a resource