From f57701d4d711b513f492de7dc9260fd13576fd4d Mon Sep 17 00:00:00 2001
From: lionsdev <dev@lions.dev>
Date: Thu, 23 Apr 2026 02:34:41 +0000
Subject: [PATCH] chore: migrate to ESO-managed secrets (Vault backend)

---
 values.yaml | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/values.yaml b/values.yaml
index bc6863b..384150f 100644
--- a/values.yaml
+++ b/values.yaml
@@ -42,12 +42,15 @@ lions-app:
   # Secrets depuis K8s Secrets existants (migration Vault à venir)
   extraEnvFrom:
     - secretRef:
-        name: mic-after-work-server-impl-quarkus-main-db-secret
+        name: mic-after-work-db-eso
     - secretRef:
-        name: mic-after-work-server-impl-quarkus-main-oidc-secret
+        name: mic-after-work-oidc-eso
+    - secretRef:
+        name: brevo-smtp-eso
+        optional: true
 
   externalSecret:
-    enabled: false   # TODO: migrate to Vault ExternalSecret
+    enabled: false  # migrated to Vault via separate ESO
 
   ingress:
     enabled: true