Database Deployment

The database takes its password from a Secret and keeps its data in a volume. In this project, for simplicity, we use a single-replica Deployment; in production, a StatefulSet, which provides persistent storage and a stable identity, is preferred for databases (in the advanced section):

apiVersion: apps/v1
kind: Deployment
metadata:
  name: db
  namespace: magaza
spec:
  replicas: 1
  selector:
    matchLabels: {app: db}
  template:
    metadata:
      labels: {app: db}
    spec:
      containers:
        - name: postgres
          image: postgres:16
          envFrom:
            - secretRef:
                name: db-gizli
          ports:
            - containerPort: 5432

The API connects to the database by the name db; this needs a ClusterIP Service with the same name. The password is put in the Secret with a command and isn't added to the repository as YAML:

kubectl create secret generic db-gizli -n magaza \
  --from-literal=POSTGRES_PASSWORD="$DB_PAROLA" --from-literal=POSTGRES_DB=magaza

apiVersion: v1
kind: Service
metadata:
  name: db
  namespace: magaza
spec:
  selector:
    app: db
  ports:
    - port: 5432