diff --git a/values.yaml b/values.yaml
index 9dfe316..f5fb1ca 100644
--- a/values.yaml
+++ b/values.yaml
@@ -39,10 +39,13 @@ lions-app:
   # Secrets depuis K8s Secrets existants (migration Vault à venir)
   extraEnvFrom:
     - secretRef:
-        name: unionflow-client-oidc-secret
+        name: unionflow-client-oidc-eso
+    - secretRef:
+        name: brevo-smtp-eso
+        optional: true
 
   externalSecret:
-    enabled: false   # TODO: migrate to Vault ExternalSecret
+    enabled: false  # migrated to Vault via separate ESO
 
   ingress:
     enabled: true