diff --git a/ops/chart/values.yaml b/ops/chart/values.yaml
index 1258a03..6d2c580 100644
--- a/ops/chart/values.yaml
+++ b/ops/chart/values.yaml
@@ -41,7 +41,7 @@ controllers:
           DATABASE_URL:
             valueFrom:
               secretKeyRef:
-                name: policy-service-pg-app
+                name: policy-service-cluster-pg-app
                 key: uri
         probes:
           liveness:
@@ -91,13 +91,14 @@ rawResources:
     kind: Password
     suffix: password-generator 
     spec:
-      length: 32
-      noUpper: false
-      noDigits: false
-      allowRepeat: true
-      secretKeys:
-        - cookie
-        - secretKeyBase
+      spec:
+        length: 32
+        noUpper: false
+        noDigits: false
+        allowRepeat: true
+        secretKeys:
+          - cookie
+          - secretKeyBase
 
   external-secret:
     enabled: true
@@ -105,19 +106,20 @@ rawResources:
     kind: ExternalSecret
     suffix: secrets
     spec:
-      refreshInterval: 0s
-      secretStoreRef:
-        name: cluster-secrets-store
-        kind: ClusterSecretStore
-      target:
-        name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-secrets'
-        creationPolicy: Owner
-      dataFrom:
-        - sourceRef:
-            generatorRef:
-              apiVersion: generators.external-secrets.io/v1alpha1
-              kind: Password
-              name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-password-generator'
+      spec:
+        refreshInterval: 0s
+        secretStoreRef:
+          name: cluster-secrets-store
+          kind: ClusterSecretStore
+        target:
+          name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-secrets'
+          creationPolicy: Owner
+        dataFrom:
+          - sourceRef:
+              generatorRef:
+                apiVersion: generators.external-secrets.io/v1alpha1
+                kind: Password
+                name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-password-generator'
 
   cluster:
     enabled: true