From 0a4d99b65bb535c0c61fd8fd3682d890f66eda18 Mon Sep 17 00:00:00 2001
From: WorkClub Automation <automation@workclub.local>
Date: Tue, 10 Mar 2026 21:18:19 +0100
Subject: [PATCH] fix(k8s): add dev secrets and use emptyDir for postgres on
 storage-less cluster

---
 infra/k8s/overlays/dev/patches/postgres-patch.yaml | 11 +++++++++++
 infra/k8s/overlays/dev/secrets.yaml                | 10 ++++++++++
 2 files changed, 21 insertions(+)
 create mode 100644 infra/k8s/overlays/dev/patches/postgres-patch.yaml
 create mode 100644 infra/k8s/overlays/dev/secrets.yaml

diff --git a/infra/k8s/overlays/dev/patches/postgres-patch.yaml b/infra/k8s/overlays/dev/patches/postgres-patch.yaml
new file mode 100644
index 0000000..f65fb29
--- /dev/null
+++ b/infra/k8s/overlays/dev/patches/postgres-patch.yaml
@@ -0,0 +1,11 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: workclub-postgres
+spec:
+  template:
+    spec:
+      volumes:
+        - name: postgres-data
+          emptyDir: {}
+  volumeClaimTemplates: [] # This removes the VCT from the base
diff --git a/infra/k8s/overlays/dev/secrets.yaml b/infra/k8s/overlays/dev/secrets.yaml
new file mode 100644
index 0000000..870f629
--- /dev/null
+++ b/infra/k8s/overlays/dev/secrets.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: workclub-secrets
+type: Opaque
+stringData:
+  database-connection-string: "Host=workclub-postgres;Database=workclub;Username=app;Password=devpassword"
+  postgres-password: "devpassword"
+  keycloak-db-password: "keycloakpass"
+  keycloak-admin-password: "adminpassword"