fix(immich): rework secrets embedding

apps/base/immich/release.yaml

@@ -20,14 +20,6 @@ spec:
     - kind: ConfigMap
       name: immich-base-values
       valuesKey: values.yaml
-    - kind: Secret
-      name: immich.immich-postgres.credentials.postgresql.acid.zalan.do
-      valuesKey: username
-      targetPath: env.DB_USERNAME
-    - kind: Secret
-      name: immich.immich-postgres.credentials.postgresql.acid.zalan.do
-      valuesKey: password
-      targetPath: env.DB_PASSWORD
     - kind: Secret
       name: immich-override-values
       valuesKey: values-overrides.yaml
@@ -51,6 +43,24 @@ spec:
             patch:
               - op: "remove"
                 path: /spec/template/spec/containers/0/livenessProbe
+          - target:
+              kind: Deployment
+              version: v1
+              group: apps
+            patch:
+              - op: "add"
+                path: /spec/template/spec/containers/0/env/-
+                value:
+                  - name: DB_USERNAME
+                    volumeFrom:
+                      secretKeyRef:
+                        name: immich.immich-postgres.credentials.postgresql.acid.zalan.do
+                        key: username
+                  - name: DB_PASSWORD
+                    volumeFrom:
+                      secretKeyRef:
+                        name: immich.immich-postgres.credentials.postgresql.acid.zalan.do
+                        key: password
           - target:
               version: v1
               kind: Deployment