passbolt: migrate to envFrom with per-container InfisicalSecrets

Also removes the now-stale flat CR files for searxng, outline and passbolt, which ArgoCD would otherwise recreate pointing at emptied folders.
2026-08-23 21:54:06 +02:00
parent fccf9074d2
commit 77b8bd4475
5 changed files with 17 additions and 105 deletions
@@ -31,24 +31,9 @@ spec:
              mountPath: /var/lib/mysql
          ports:
            - containerPort: 3306 
-          env:
-            - name: MYSQL_RANDOM_ROOT_PASSWORD
-              value: "true"
-            - name: MYSQL_DATABASE
-              valueFrom:
-                secretKeyRef:
-                  name: passbolt-secrets
-                  key: db_name
-            - name: MYSQL_USER
-              valueFrom:
-                secretKeyRef:
-                  name: passbolt-secrets
-                  key: db_user
-            - name: MYSQL_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: passbolt-secrets
-                  key: db_password
+          envFrom:
+            - secretRef:
+                name: passbolt-mariadb-secrets
      volumes:
        - name: passbolt-mariadb-volume
          persistentVolumeClaim: