diff --git a/deployment/install.sh b/deployment/install.sh
new file mode 100755
index 0000000..06d02bd
--- /dev/null
+++ b/deployment/install.sh
@@ -0,0 +1,12 @@
+#!/bin/bash
+
+
+NAMESPACE=$(cat namespace)
+~/Workspace/MyKubernetesEnv/tools/create-namespace.sh $NAMESPACE
+
+./roll-db-credential.sh
+
+kubectl -f install.yml -n $NAMESPACE apply
+
+kubectl apply -f - -n $NAMESPACE
+
diff --git a/deployment/install.yml b/deployment/install.yml
new file mode 100644
index 0000000..73b6516
--- /dev/null
+++ b/deployment/install.yml
@@ -0,0 +1,36 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: cemmetering
+data:
+  MQTT_BROKER: "emqx01-anonymous-cluster-internal.broker.svc.cluster.local"
+  MQTT_PORT: "1883"
+  PGDATABASE: "cem_monitoring_berresheim"
+  PGHOST: "timescaledb.database.svc.cluster.local"
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: cemmetering
+  labels:
+    app: cemmetering
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: cemmetering
+  template:
+    metadata:
+      labels:
+        app: cemmetering
+    spec:
+      containers:
+        - name: cemmetering
+          image: wollud1969/cemmetering-preprocessor:1.0.0
+          envFrom:
+            - configMapRef:
+                name: cemmetering
+            - secretRef:
+                name: cemmetering-db-cred
+
+
diff --git a/deployment/namespace b/deployment/namespace
new file mode 100644
index 0000000..5d9060d
--- /dev/null
+++ b/deployment/namespace
@@ -0,0 +1 @@
+berresheim
diff --git a/deployment/roll-db-credential.sh b/deployment/roll-db-credential.sh
new file mode 100755
index 0000000..e6a3cf0
--- /dev/null
+++ b/deployment/roll-db-credential.sh
@@ -0,0 +1,33 @@
+#!/bin/bash
+
+. ~/Workspace/MyKubernetesEnv/ENVDB
+
+DATABASE=cem_monitoring_berresheim
+LOGIN=cem_preprocessor
+PASSWORD=`openssl rand -base64 24`
+NAMESPACE=`cat namespace`
+
+psql <<EOF
+do
+\$\$
+begin
+  if not exists (SELECT * FROM pg_user WHERE usename = '$LOGIN') then
+    CREATE USER $LOGIN WITH PASSWORD '$PASSWORD';
+  else
+    ALTER USER $LOGIN WITH PASSWORD '$PASSWORD';
+  end if;
+end
+\$\$
+;
+commit;
+EOF
+
+kubectl create secret generic cemmetering-db-cred \
+  --dry-run=client \
+  -o yaml \
+  --save-config \
+  --from-literal=PGUSER="$LOGIN" \
+  --from-literal=PGPASSWORD="$PASSWORD" | \
+kubectl apply -f - -n $NAMESPACE
+
+
diff --git a/src/preprocess.py b/src/preprocess.py
index 57bcd5c..efe7f9d 100644
--- a/src/preprocess.py
+++ b/src/preprocess.py
@@ -150,21 +150,6 @@ logger.info("preprocess starting")
 
 
 
-REQUIRED_CONFIG_OPTIONS = [ 
-    'MQTT_LOGIN',
-    'MQTT_PASSWORD',
-    'MQTT_BROKER',
-    'MQTT_PORT',
-    'MQTT_CA'
-]
-
-config = {}
-for rco in REQUIRED_CONFIG_OPTIONS:
-    try:
-        config[rco] = os.environ[rco]
-    except KeyError:
-        logger.error(f"{rco} is a required config option, not available in environment")
-        sys.exit(-1)
 
 
 
@@ -172,12 +157,7 @@ client = mqtt.Client()
 client.on_message = mqttOnMessageCallback
 client.on_connect = mqttOnConnectCallback
 client.on_disconnect = mqttOnDisconnectCallback
-client.username_pw_set(config['MQTT_LOGIN'], config['MQTT_PASSWORD'])
-client.tls_set(
-    cert_reqs=ssl.CERT_REQUIRED,
-    ciphers=None
-)
-client.connect(config["MQTT_BROKER"], int(config["MQTT_PORT"]))
+client.connect(os.environ["MQTT_BROKER"], int(os.environ["MQTT_PORT"]))
 #client.connect('172.16.2.16', 1883)
 logger.info("mqtt loop starting")
 client.loop_forever()