Hello 👋, I've been stuck on an issue for quite some time now. I have a kubernetes external secret to store my database secret values on aws. I use the official Kratos Helm chart to deploy Kratos and I would like the DSN to be dynamically set based on my secret values. For now, my kratos

values.yaml

file is defined like this:

kratos:
  kratos:
      tolerations:
        - key: "lifecycle"
          operator: "Equal"
          value: "Ec2Spot"
          effect: "NoSchedule"
      deployment:
        replicas: 2
        podLabels:
        app: kratos
        extraEnv:
            - name: KRATOS_HOST
              valueFrom: 
                secretKeyRef:
                name: kratos-credentials
                key: KRATOS_HOST 
            - name: KRATOS_USERNAME 
              valueFrom: 
                secretKeyRef:
                name: kratos-credentials
                key: KRATOS_USERNAME
            - name: KRATOS_PASSWORD
              valueFrom: 
                secretKeyRef:
                name: kratos-credentials
                key: KRATOS_PASSWORD
            - name: KRATOS_PORT
              valueFrom:
                secretKeyRef:
                  name: kratos-credentials
                  key: KRATOS_PORT
            - name: KRATOS_DATABASE
              valueFrom:
                secretKeyRef:
                  name: kratos-credentials
                  key: KRATOS_DATABASE
            - name: DSN
              value: "postgres://$(KRATOS_USERNAME):$(KRATOS_PASSWORD)@$(KRATOS_HOST):$(KRATOS_PORT)/$(KRATOS_DATABASE)?sslmode=disable&max_conns=20&max_idle_conns=4"

But it seems like the values are ignored at runtime and the default dsn value is used instead of the dynamic one I want. Does someone have an idea what am I doing wrong ?