$ cat zabbix-web.yaml 
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: zabbix
  name: zabbix-web
  namespace: zabbix 
spec:
  selector:
    matchLabels:
      app: zabbix
  template:
    metadata:
      labels:
        app: zabbix
    spec:
      containers:
      - env:
        - name: DB_SERVER_HOST
          valueFrom:
            secretKeyRef:
              key: host
              name: pgsql-secret 
        - name: DB_SERVER_PORT
          valueFrom:
            secretKeyRef:
              key: port
              name: pgsql-secret
        - name: POSTGRES_USER
          valueFrom:
            secretKeyRef:
              key: user
              name: pgsql-secret
        - name: POSTGRES_PASSWORD
          valueFrom:
            secretKeyRef:
              key: password
              name: pgsql-secret 
        - name: POSTGRES_DB
          valueFrom:
            secretKeyRef:
              key: dbname
              name: pgsql-secret
        image: zabbix/zabbix-web-nginx-pgsql:ol-6.2-latest 
        imagePullPolicy: IfNotPresent
        name: zabbix-web
        ports:
        - containerPort: 8080
          name: zabbix-web
          protocol: TCP
        resources: {}
      restartPolicy: Always
      securityContext: {}