Because I pushed the environment variable changes to the cluster already, psycopg2 was automatically trying to connect to the database using the file specified in PGSSLROOTCERT. That ConfigMap was not mounted into the migrations container, so I'm doing that here.