# Migrate Nexus Repository Clustered Deployments to Use External Secrets Operator

As of release 3.74.0, highly available deployments may use an external secrets operator. Follow these steps to migrate to an external secrets operator:

1. Scale your pods down to 0.

2. Install the external secrets operator.
   
   See the [external secrets documentation](https://external-secrets.io/latest/introduction/getting-started/)

3. Follow the instructions for setting up permissions.
   
   See the [aws-secrets-manager](https://external-secrets.io/latest/provider/aws-secrets-manager/) for an example

4. Update your values.yml to use external secrets.
   
   See the instructions in the [HA README file](https://github.com/sonatype/nxrm3-ha-repository/tree/main/nxrm-ha#secrets)

5. Set the following properties in your `values.yaml` to false.
   
   
   ```
   secret.azure.nexusSecret.enabled=false
   azure.keyvault.enabled=false
   ```

6. Scale back up your pods.