diff --git a/charts/grafana/my-values/values-int.yaml b/charts/grafana/my-values/values-int.yaml
index 861dda2..0196564 100644
--- a/charts/grafana/my-values/values-int.yaml
+++ b/charts/grafana/my-values/values-int.yaml
@@ -30,6 +30,9 @@ datasources:
         url: http://prometheus-server
         isDefault: true
 
+# ✅ טוען משתנים מה-Secret שנוצר ע״י ExternalSecret
+envFromSecret: grafana-oidc-secret
+
 grafana.ini:
   server:
     root_url: https://grafana-int.dvirlabs.com
@@ -41,13 +44,10 @@ grafana.ini:
     name: Keycloak
     allow_sign_up: true
     client_id: grafana
-    client_secret: 6mfAtg8ZrioiCZMsbMi4dbZyJk205nRi
+    client_secret: ${client_secret}
     scopes: openid profile email
     auth_url: https://keycloak.dvirlabs.com/realms/lab/protocol/openid-connect/auth
     token_url: https://keycloak.dvirlabs.com/realms/lab/protocol/openid-connect/token
     api_url: https://keycloak.dvirlabs.com/realms/lab/protocol/openid-connect/userinfo
     role_attribute_path: contains(groups[*], 'grafana-admins') && 'Admin' || 'Viewer'
     allow_assign_grafana_admin: true
-
-env:
-  GF_AUTH_GENERIC_OAUTH_NAME: Keycloak