1. Generate encoded secret: kubectl create secret generic <SECRET_NAME> --from-literal <PGPASS=123>