immich: migrate to envFrom with per-container InfisicalSecrets

Flat CR narrowed to recursive: false so it keeps serving the SMB credentials that immich-data-smb references by name.
2026-08-23 22:15:10 +02:00
parent 77b8bd4475
commit c408522988
5 changed files with 59 additions and 43 deletions
@@ -17,7 +17,9 @@ spec:
        projectSlug: "kubernetes"
        envSlug: "prod"
        secretsPath: "/immich"
-        recursive: true
+        # Root only: /immich holds the SMB mount credentials (username, password)
+        # consumed by immich-data-smb. Per-container env lives in subfolders.
+        recursive: false
  managedSecretReference:
    secretName: immich-secrets
    secretNamespace: immich