diff --git a/infra-monitoring/templates/kube-prometheus-stack/release.yaml b/infra-monitoring/templates/kube-prometheus-stack/release.yaml
index 50cd60c..548715a 100644
--- a/infra-monitoring/templates/kube-prometheus-stack/release.yaml
+++ b/infra-monitoring/templates/kube-prometheus-stack/release.yaml
@@ -175,7 +175,7 @@ spec:
           enabled: true
         {{- end }}
 
-        {{- if and .Values.commons.auth.enabled (eq .Values.commons.auth.type "authentik") }}
+      {{- if and .Values.commons.auth.enabled (eq .Values.commons.auth.type "authentik") }}
         auth.generic_oauth:
           name: authentik
           enabled: true
@@ -186,13 +186,13 @@ spec:
           token_url: https://{{ .Values.commons.auth.authentik.domain }}/application/o/token/
           api_url: https://{{ .Values.commons.auth.authentik.domain }}/application/o/userinfo/
           role_attribute_path: "contains(groups[*], 'app: grafana - admin') && 'Admin' || contains(groups[*], 'app: grafana - editor') && 'Editor' || 'Viewer'"
-        {{- end }}
       extraSecretMounts:
         - name: auth-generic-oauth-secret-mount
           secretName: monitoring-grafana-auth-generic-oauth
           defaultMode: 0440
           mountPath: /etc/secrets/auth_generic_oauth
           readOnly: true
+      {{- end }}
       testFramework:
         enabled: false
       sidecar: