SUMMARY When using Local MariaDB (localCluster: true) setting, the in so/values.yaml for the so-mariadb, the setting "rootPasswordExternalSecret" is not replaced correctly in the subchart: secrets: - uid: db-root-pass name: &dbRootPassSecretName '{{ include "common.release" . }}-so-db-root-pass' type: password ... so-mariadb: db: rootPasswordExternalSecretLocalDb: *dbRootPassSecretName rootPasswordExternalSecret: '{{ ternary .Values.db.rootPasswordExternalSecretLocalDb (include "common.mariadb.secret.rootPassSecretName" (dict "dot" . "chartName" .Values.global.mariadbGalera.nameOverride)) .Values.global.mariadbGalera.localCluster }}' backupCredsExternalSecret: *dbBackupCredsSecretName userCredsExternalSecret: *dbUserCredsSecretName adminCredsExternalSecret: *dbAdminCredsSecretName it results in the rendered so-mariadb chart to: - name: MYSQL_ROOT_PASSWORD valueFrom: secretKeyRef: name: {{ include "common.release" . }}-so-db-root-pass key: password - name: DB_USER valueFrom: secretKeyRef: name: RELEASE-so-db-user-creds key: login So the replacement of values via 2 levels fail... OS / ENVIRONMENT Helm version: 3.4.4 OOM VERSION guilin