diff --git a/cmd/tapRunner.go b/cmd/tapRunner.go
index fb1e4ae52..8633b6bcd 100644
--- a/cmd/tapRunner.go
+++ b/cmd/tapRunner.go
@@ -457,5 +457,5 @@ func updateConfig(kubernetesProvider *kubernetes.Provider) {
 	_, _ = kubernetes.SetConfig(kubernetesProvider, kubernetes.CONFIG_AUTH_ENABLED, authEnabled)
 	_, _ = kubernetes.SetConfig(kubernetesProvider, kubernetes.CONFIG_AUTH_APPROVED_EMAILS, strings.Join(config.Config.Tap.Auth.ApprovedEmails, ","))
 	_, _ = kubernetes.SetConfig(kubernetesProvider, kubernetes.CONFIG_AUTH_APPROVED_DOMAINS, strings.Join(config.Config.Tap.Auth.ApprovedDomains, ","))
-	_, _ = kubernetes.SetConfig(kubernetesProvider, kubernetes.CONFIG_AUTH_TENANT_IDS, strings.Join(config.Config.Tap.Auth.ApprovedTenants, ","))
+	_, _ = kubernetes.SetConfig(kubernetesProvider, kubernetes.CONFIG_AUTH_APPROVED_TENANTS, strings.Join(config.Config.Tap.Auth.ApprovedTenants, ","))
 }
diff --git a/kubernetes/config.go b/kubernetes/config.go
index c1159185f..09e127c4e 100644
--- a/kubernetes/config.go
+++ b/kubernetes/config.go
@@ -19,7 +19,7 @@ const (
 	CONFIG_AUTH_ENABLED          = "AUTH_ENABLED"
 	CONFIG_AUTH_APPROVED_EMAILS  = "AUTH_APPROVED_EMAILS"
 	CONFIG_AUTH_APPROVED_DOMAINS = "AUTH_APPROVED_DOMAINS"
-	CONFIG_AUTH_TENANT_IDS       = "AUTH_TENANT_IDS"
+	CONFIG_AUTH_APPROVED_TENANTS = "AUTH_APPROVED_TENANTS"
 )
 
 func SetSecret(provider *Provider, key string, value string) (updated bool, err error) {