- Remove vault folder (all secrets in externalsecret.yaml) - Move serviceaccount to base - Remove namespace.yaml (ArgoCD auto-creates)