diff --git a/action.yml b/action.yml
index cd3b1b6..4ac9ebd 100644
--- a/action.yml
+++ b/action.yml
@@ -45,7 +45,7 @@ runs:
           --key=server-key.pem
 
         go run github.com/mikefarah/yq/v4@latest -i \
-          '.jumpstarter-controller.authenticationConfig = (.jumpstarter-controller.authenticationConfig | from_yaml | .jwt[0].issuer.certificateAuthority = load_str("ca.pem") | to_yaml)' \
+          '.jumpstarter-controller.config.authentication.jwt[0].issuer.certificateAuthority = load_str("ca.pem")' \
           "$GITHUB_ACTION_PATH"/values.kind.yaml
 
         # important!
diff --git a/values.kind.yaml b/values.kind.yaml
index 964a2ed..baa65f2 100644
--- a/values.kind.yaml
+++ b/values.kind.yaml
@@ -6,17 +6,16 @@ global:
 jumpstarter-controller:
   grpc:
     mode: "ingress"
-  authenticationConfig: |
-    apiVersion: jumpstarter.dev/v1alpha1
-    kind: AuthenticationConfiguration
-    jwt:
-    - issuer:
-        url: https://dex.dex.svc.cluster.local:5556
-        audiences:
-        - jumpstarter-cli
-        audienceMatchPolicy: MatchAny
-        certificateAuthority: placeholder
-      claimMappings:
-        username:
-          claim: "name"
-          prefix: "dex:"
+  config:
+    authentication:
+      jwt:
+      - issuer:
+          url: https://dex.dex.svc.cluster.local:5556
+          audiences:
+          - jumpstarter-cli
+          audienceMatchPolicy: MatchAny
+          certificateAuthority: placeholder
+        claimMappings:
+          username:
+            claim: "name"
+            prefix: "dex:"