I guess its how these things go, been working on this individual problem for the last few days. 10 mins after I ask for help it works. For anyone else having this issue and wanting to use digitaloceans managed resources as a ha for infisical. Both DB_ROOT_CERT and NODE_EXTRA_CA_CERTS needed to be set inside of the kubeSecretRef for infisical to accept the digitalocean self signed cert