authentication.superuser.password field in the postgres.yml is stored in plain text under postgres pod

Please, answer some short questions which should help us to understand your problem / question better?

• operator image : ghcr.io/zalando/postgres-operator:v1.10.1
• environment : Kubernetes
• Type of issue : Bug report

authentication.superuser.password field in the postgres.yml is stored in plain text even when we pass Kubernetes Secrets with base64 encoded password.

postgres@rdbms-pg-cluster-dev-1:$ grep -i password postgres.yml
password: ''
password: RtttSedreSErSSErREreREEsSSSSSSSSsErERer
password: Devloper123_
postgres@rdbms-pg-cluster-dev-1:$

Is there any way in Zalando's Postgres Operator to have authentication.superuser.password field in encrypted form?

if encrytion is not possible within Zalando's Postgres Operator then, is there any other way to make postgres.yml more secure?

Start by tracing how authentication.superuser.password from postgres.yml is generated and how Kubernetes Secrets are passed to the Postgres pod. Check the operator's documented secret-handling behavior and compare the resulting configuration; done means establishing whether encrypted storage is supported or what secure configuration and documentation are needed.