I have a service within a K8S cluster which requires a database to store it’s data (lets say Postgres).

I install the Postgres Helm chart so a Postgres pod and a corresponding Postgres service are created within the cluster. The service is of type ClusterIP – so it is accessible only internally within the cluster.

My question is if I should care about managing secrets to store the default DB user/password which I then pass to my chart values during deployment? Or I can use some basic “hardcoded” values like: root/root since the DB connection is only used internally anyways?

Any possible security issues with a “hardcode” approach?