# The shortest correct Migration: a one-shot clone of everything.
# Passwords come from Secrets and never appear in the CR, Job spec, or logs.
# Watch it: kubectl get pgm -w; details: kubectl describe migration clone-minimal
apiVersion: pgcopydb-operator.io/v1beta1
kind: Migration
metadata:
  name: clone-minimal
spec:
  source:
    host: shop.example.com
    database: shop
    username: migrator
    passwordSecretRef: {name: shop-source, key: password}
    sslMode: require
  target:
    host: shop-pg-rw.shop.svc
    database: shop
    username: app
    passwordSecretRef: {name: shop-pg-app, key: password}