Use full secret paths.

apps/ghost/db-init-job.yaml

@@ -27,7 +27,7 @@ spec:
               valueFrom:
                 secretKeyRef:
                   name: mysql-secrets
-                  key: rootPassword
+                  key: apps.mysql.rootPassword
             - name: DB_HOSTNAME
               value: "{{ .apps.ghost.dbHost }}"
             - name: DB_PORT
@@ -40,5 +40,5 @@ spec:
               valueFrom:
                 secretKeyRef:
                   name: ghost-secrets
-                  key: dbPassword
+                  key: apps.ghost.dbPassword
       restartPolicy: OnFailure

apps/ghost/deployment.yaml

@@ -39,7 +39,7 @@ spec:
               valueFrom:
                 secretKeyRef:
                   name: ghost-secrets
-                  key: dbPassword
+                  key: apps.ghost.dbPassword
             - name: GHOST_HOST
               value: {{ .apps.ghost.domain }}
             - name: GHOST_PORT_NUMBER
@@ -50,7 +50,7 @@ spec:
               valueFrom:
                 secretKeyRef:
                   name: ghost-secrets
-                  key: adminPassword
+                  key: apps.ghost.adminPassword
             - name: GHOST_EMAIL
               value: {{ .apps.ghost.adminEmail }}
             - name: GHOST_BLOG_TITLE
@@ -75,7 +75,7 @@ spec:
               valueFrom:
                 secretKeyRef:
                   name: ghost-secrets
-                  key: smtpPassword
+                  key: apps.ghost.smtpPassword
             - name: GHOST_SMTP_FROM_ADDRESS
               value: {{ .apps.ghost.smtp.from }}
           resources: