Finish RPF-WP-0019 apps-pg controls and recovery

helm/apps-pg-isolation-probe.yaml

@@ -0,0 +1,67 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: apps-pg-isolation-probe
+  labels:
+    railiance.io/postgres-client: apps-pg
+    railiance.io/purpose: apps-pg-isolation-probe
+---
+apiVersion: v1
+kind: Pod
+metadata:
+  name: coulomb-probe
+  namespace: apps-pg-isolation-probe
+  labels:
+    app.kubernetes.io/name: apps-pg-isolation-probe
+spec:
+  restartPolicy: Never
+  automountServiceAccountToken: false
+  containers:
+    - name: psql
+      image: ghcr.io/cloudnative-pg/postgresql:16
+      command: [sh, -c, "sleep 1800"]
+      env:
+        - name: PGPASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: coulomb-social-app-credentials
+              key: password
+      resources:
+        requests: {cpu: 10m, memory: 32Mi}
+        limits: {cpu: 100m, memory: 128Mi}
+      securityContext:
+        allowPrivilegeEscalation: false
+        capabilities: {drop: [ALL]}
+        runAsNonRoot: true
+        runAsUser: 26
+        seccompProfile: {type: RuntimeDefault}
+---
+apiVersion: v1
+kind: Pod
+metadata:
+  name: vergabe-probe
+  namespace: apps-pg-isolation-probe
+  labels:
+    app.kubernetes.io/name: apps-pg-isolation-probe
+spec:
+  restartPolicy: Never
+  automountServiceAccountToken: false
+  containers:
+    - name: psql
+      image: ghcr.io/cloudnative-pg/postgresql:16
+      command: [sh, -c, "sleep 1800"]
+      env:
+        - name: PGPASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: vergabe-app-credentials
+              key: password
+      resources:
+        requests: {cpu: 10m, memory: 32Mi}
+        limits: {cpu: 100m, memory: 128Mi}
+      securityContext:
+        allowPrivilegeEscalation: false
+        capabilities: {drop: [ALL]}
+        runAsNonRoot: true
+        runAsUser: 26
+        seccompProfile: {type: RuntimeDefault}