expose! very safe yes yes

deploy/base/expose.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: postgres-nodeport
+  labels:
+    app: postgres
+spec:
+  type: NodePort
+  ports:
+    - port: 5432        # The port the service listens on inside the cluster
+      targetPort: 5432  # The port the Postgres container is listening on
+      nodePort: 32432   # Optional: Fixed port between 30000-32767
+      protocol: TCP
+  selector:
+    app: postgres

deploy/base/kustomization.yaml

@@ -13,3 +13,4 @@ resources:
   - ./postgres.yaml
   - ./database-secret.yaml
   - ./app-secret.yaml
+  - ./expose.yaml