diff --git a/applicationsets/grafana-appset.yaml b/applicationsets/grafana-appset.yaml
index b3e133b..a38b45d 100644
--- a/applicationsets/grafana-appset.yaml
+++ b/applicationsets/grafana-appset.yaml
@@ -23,10 +23,10 @@ spec:
       source:
         repoURL: https://git.dvirlabs.com/dvirlabs/observability-stack.git
         targetRevision: master
-        path: charts/grafana
+        path: manifests/grafana
         helm:
           valueFiles:
-            - my-values/values-{{env}}.yaml
+            - ../my-values/{{valuesFile}}
       destination:
         server: https://kubernetes.default.svc
         namespace: monitoring
diff --git a/manifests/grafana/external-secret.yaml b/manifests/grafana/external-secret.yaml
new file mode 100644
index 0000000..e57b263
--- /dev/null
+++ b/manifests/grafana/external-secret.yaml
@@ -0,0 +1,18 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: grafana-oidc
+  namespace: monitoring
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: vault-backend
+    kind: ClusterSecretStore
+  target:
+    name: grafana-oidc-secret
+    creationPolicy: Owner
+  data:
+    - secretKey: client_secret
+      remoteRef:
+        key: secret/grafana-oidc
+        property: client_secret
\ No newline at end of file