diff --git a/.gitignore b/.gitignore
index 16f2dc5..038e0df 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,3 @@
-*.csv
\ No newline at end of file
+*.csv
+*.env
+*.vantage.yaml
\ No newline at end of file
diff --git a/kubernetes/bare-kubernetes/001_OMOP-Secrets.yaml b/kubernetes/bare-kubernetes/001_OMOP-Secrets.yaml
index c3f09b4..19839fb 100644
--- a/kubernetes/bare-kubernetes/001_OMOP-Secrets.yaml
+++ b/kubernetes/bare-kubernetes/001_OMOP-Secrets.yaml
@@ -4,4 +4,5 @@ metadata:
   name: omop-secrets
 type: Opaque
 data:
+  POSTGRES_USER: cG9zdGdyZXM= # postgres in base64
   POSTGRES_PASSWORD: bXlzZWNyZXRwYXNzd29yZA== # mysecretpassword in base64
\ No newline at end of file
diff --git a/kubernetes/bare-kubernetes/002_OMOP-CDM-Deployment.yaml b/kubernetes/bare-kubernetes/002_OMOP-CDM-Deployment.yaml
index 56d6bcb..53dd355 100644
--- a/kubernetes/bare-kubernetes/002_OMOP-CDM-Deployment.yaml
+++ b/kubernetes/bare-kubernetes/002_OMOP-CDM-Deployment.yaml
@@ -18,7 +18,9 @@ spec:
           imagePullPolicy: IfNotPresent
           env:
             - name: POSTGRES_USER
-              value: postgres
+              secretKeyRef:
+                  name: omop-secrets
+                  key: POSTGRES_USER
             - name: POSTGRES_PASSWORD
               valueFrom:
                 secretKeyRef:
diff --git a/kubernetes/bare-kubernetes/004_OMOP-Vocab-job.yaml b/kubernetes/bare-kubernetes/004_OMOP-Vocab-job.yaml
index 96d8fc5..d633231 100644
--- a/kubernetes/bare-kubernetes/004_OMOP-Vocab-job.yaml
+++ b/kubernetes/bare-kubernetes/004_OMOP-Vocab-job.yaml
@@ -16,7 +16,10 @@ spec:
             - name: VOCAB_PG_DATABASE
               value: omopdb
             - name: VOCAB_PG_USER
-              value: postgres
+              valueFrom:
+                secretKeyRef:
+                  name: omop-secrets
+                  key: POSTGRES_USER
             - name: VOCAB_PG_PASSWORD
               valueFrom:
                 secretKeyRef: