postgresql: added secrets manifest for sensitive variables.

A secret volume named `postgresql` is created to store password
variables.

postgresql/Chart.yaml

@@ -2,7 +2,7 @@ name: postgresql
 home: http://www.postgresql.org
 source:
 - https://github.com/bitnami/bitnami-docker-postgresql
-version: 0.2.0
+version: 0.2.1
 description: Chart for PostgreSQL
 maintainers:
 - Bitnami <containers@bitnami.com>

postgresql/manifests/postgresql-rc.yaml

@@ -25,7 +25,10 @@ spec:
         - name: POSTGRES_USER
           value: "postgres"
         - name: POSTGRES_PASSWORD
-          value: ""
+          valueFrom:
+            secretKeyRef:
+              name: postgresql
+              key: postgres-password
         - name: POSTGRES_DB
           value: ""
         ports:

postgresql/manifests/postgresql-secrets.yaml

@@ -0,0 +1,11 @@
+#helm:generate helmc tpl -d tpl/values.toml -o manifests/postgresql-secrets.yaml $HELM_GENERATE_FILE
+apiVersion: v1
+kind: Secret
+metadata:
+  name: postgresql
+  labels:
+    provider: postgresql
+    heritage: bitnami
+type: Opaque
+data:
+  postgres-password: ""

postgresql/tpl/postgresql-rc.yaml

@@ -25,7 +25,10 @@ spec:
         - name: POSTGRES_USER
           value: {{ .postgresUser | quote }}
         - name: POSTGRES_PASSWORD
-          value: {{ .postgresPassword | quote }}
+          valueFrom:
+            secretKeyRef:
+              name: postgresql
+              key: postgres-password
         - name: POSTGRES_DB
           value: {{ .postgresDb | quote }}
         ports:

postgresql/tpl/postgresql-secrets.yaml

@@ -0,0 +1,11 @@
+#helm:generate helmc tpl -d tpl/values.toml -o manifests/postgresql-secrets.yaml $HELM_GENERATE_FILE
+apiVersion: v1
+kind: Secret
+metadata:
+  name: postgresql
+  labels:
+    provider: postgresql
+    heritage: bitnami
+type: Opaque
+data:
+  postgres-password: {{ .postgresPassword | b64enc | quote }}