diff --git a/charts/kubezero-argo/secrets.yaml b/charts/kubezero-argo/secrets.yaml
new file mode 100644
index 00000000..50fd1f14
--- /dev/null
+++ b/charts/kubezero-argo/secrets.yaml
@@ -0,0 +1,22 @@
+# KubeZero secrets
+#
+test: supergeheim
+secrets:
+  - name: argocd-secret
+    optional: false
+    data:
+      admin.password: test
+      admin.passwordMtime: now
+      server.secretkey: boohoo
+  - name: zero-downtime-gitea
+    optional: true
+    data:
+      name: zero-downtime-gitea
+      type: git
+      url: ssh://git@git.zero-downtime.net/quark/kube-grandnagus.git
+      sshPrivateKey: |
+        boohooKey
+      metadata:
+        labels:
+          argocd.argoproj.io/secret-type: repository
+
diff --git a/charts/kubezero/scripts/delete_istio_17.sh b/charts/kubezero/scripts/delete_istio_17.sh
deleted file mode 100755
index 6ea378a5..00000000
--- a/charts/kubezero/scripts/delete_istio_17.sh
+++ /dev/null
@@ -1,19 +0,0 @@
-#!/bin/bash
-
-# Istio operator resources first
-kubectl delete Istiooperators kubezero-istio -n istio-system
-kubectl delete Istiooperators kubezero-istio-private-ingress -n istio-system
-
-# Istio operator itself
-kubectl delete deployment istio-operator -n istio-operator
-kubectl delete ns istio-operator
-
-# Remove policy pod
-kubectl delete deployment istio-policy -n istio-system
-
-# Remove old gateways
-kubectl delete gateways ingressgateway -n istio-system
-kubectl delete gateways private-ingressgateway -n istio-system
-
-# Remove old shared public cert
-kubectl delete certificate public-ingress-cert -n istio-system