apiVersion: v1
kind: Namespace
metadata:
  name: apps-pg-isolation-probe
  labels:
    railiance.io/postgres-client: apps-pg
    railiance.io/purpose: apps-pg-isolation-probe
---
apiVersion: v1
kind: Pod
metadata:
  name: coulomb-probe
  namespace: apps-pg-isolation-probe
  labels:
    app.kubernetes.io/name: apps-pg-isolation-probe
spec:
  restartPolicy: Never
  automountServiceAccountToken: false
  containers:
    - name: psql
      image: ghcr.io/cloudnative-pg/postgresql:16
      command: [sh, -c, "sleep 1800"]
      env:
        - name: PGPASSWORD
          valueFrom:
            secretKeyRef:
              name: coulomb-social-app-credentials
              key: password
      resources:
        requests: {cpu: 10m, memory: 32Mi}
        limits: {cpu: 100m, memory: 128Mi}
      securityContext:
        allowPrivilegeEscalation: false
        capabilities: {drop: [ALL]}
        runAsNonRoot: true
        runAsUser: 26
        seccompProfile: {type: RuntimeDefault}
---
apiVersion: v1
kind: Pod
metadata:
  name: vergabe-probe
  namespace: apps-pg-isolation-probe
  labels:
    app.kubernetes.io/name: apps-pg-isolation-probe
spec:
  restartPolicy: Never
  automountServiceAccountToken: false
  containers:
    - name: psql
      image: ghcr.io/cloudnative-pg/postgresql:16
      command: [sh, -c, "sleep 1800"]
      env:
        - name: PGPASSWORD
          valueFrom:
            secretKeyRef:
              name: vergabe-app-credentials
              key: password
      resources:
        requests: {cpu: 10m, memory: 32Mi}
        limits: {cpu: 100m, memory: 128Mi}
      securityContext:
        allowPrivilegeEscalation: false
        capabilities: {drop: [ALL]}
        runAsNonRoot: true
        runAsUser: 26
        seccompProfile: {type: RuntimeDefault}