diff --git a/flux2/apps/monitoring/kube-prometheus-stack-values-configmap.yaml b/flux2/apps/monitoring/kube-prometheus-stack-values-configmap.yaml
index 11bb919a29d7656df58096de21a4abe3639366d4..03cf487d6e2e4c0da3df7a36ad4be99ce66cda25 100644
--- a/flux2/apps/monitoring/kube-prometheus-stack-values-configmap.yaml
+++ b/flux2/apps/monitoring/kube-prometheus-stack-values-configmap.yaml
@@ -155,7 +155,7 @@ data:
           name: Stackspin
           enabled: true
           client_id: grafana
-          client_secret: "${grafana_oauth_client_secret}"
+          client_secret: "${client_secret}"
           scopes: "openid profile email stackspin_roles"
           auth_url: "https://sso.${domain}/oauth2/auth"
           token_url: "https://sso.${domain}/oauth2/token"
diff --git a/flux2/cluster/optional/monitoring/monitoring.yaml b/flux2/cluster/optional/monitoring/monitoring.yaml
index 081655743db06d9dbd914ce2806eb0885c0bb4ed..aea979770114da97959fb364115f627e85f4a539 100644
--- a/flux2/cluster/optional/monitoring/monitoring.yaml
+++ b/flux2/cluster/optional/monitoring/monitoring.yaml
@@ -61,6 +61,8 @@ spec:
     substituteFrom:
       - kind: Secret
         name: stackspin-kube-prometheus-stack-variables
+      - kind: Secret
+        name: stackspin-kube-prometheus-stack-oauth-variables
       - kind: Secret
         name: stackspin-oauth-variables
       - kind: Secret