chore: document postgres.noPasswordEnv (#1131)

johnstcn · web-flow · commit 089544b2b5da · 2022-09-28T20:43:16.000+01:00
* chore: document postgres.noPasswordEnv

* fixup! chore: document postgres.noPasswordEnv
diff --git a/guides/deployments/postgres.md b/guides/deployments/postgres.md
@@ -44,6 +44,14 @@ or cluster.
    the console, to avoid inadvertently storing credentials in shell history
    files.
 
+   > Normally, we set the PostgreSQL password as an environment variable in the
+   > `coderd` deployment with a reference to the Kubernetes secret. If this is
+   > not desirable, you can instead mount the secret as a file which Coder will
+   > read at startup. To do this, set the Helm value `postgres.noPasswordEnv` to
+   > `true`. This will mount the secret under
+   > `/run/secrets/<.Values.postgres.passwordSecret>/password` and set the
+   > environment variable `DB_PASSWORD_PATH` for `coderd` to that value.
+
 1. Get the port number for your PostgreSQL instance:
 
    ```sql
