diff --git a/services/jenkins/helmrelease.yaml b/services/jenkins/helmrelease.yaml
index 80f3604..e0d8fbb 100644
--- a/services/jenkins/helmrelease.yaml
+++ b/services/jenkins/helmrelease.yaml
@@ -180,17 +180,17 @@ spec:
             clientId: "${OIDC_CLIENT_ID}"
             clientSecret: "${OIDC_CLIENT_SECRET}"
             serverConfiguration:
-              wellKnownOpenIDConfigurationUrl: "${OIDC_ISSUER}/.well-known/openid-configuration"
-            logoutFromOpenIdProvider: true
+              wellKnown:
+                wellKnownOpenIDConfigurationUrl: "${OIDC_ISSUER}/.well-known/openid-configuration"
+                scopesOverride: "openid profile email"
+          logoutFromOpenIdProvider: true
             postLogoutRedirectUrl: "https://ci.bstein.dev"
-            scopes: "openid profile email"
             sendScopesInTokenRequest: true
             rootURLFromRequest: true
             userNameField: "preferred_username"
             fullNameFieldName: "name"
             emailFieldName: "email"
             groupsFieldName: "groups"
-            escapeHatchEnabled: false
         authorizationStrategy: |
           loggedInUsersCanDoAnything:
             allowAnonymousRead: false