diff --git a/charts/kubeflow/common/oidc-client/oauth2-proxy/base/patch-oauth2-proxy-config.yaml b/charts/kubeflow/common/oidc-client/oauth2-proxy/base/patch-oauth2-proxy-config.yaml
index c57427d..05129d3 100644
--- a/charts/kubeflow/common/oidc-client/oauth2-proxy/base/patch-oauth2-proxy-config.yaml
+++ b/charts/kubeflow/common/oidc-client/oauth2-proxy/base/patch-oauth2-proxy-config.yaml
@@ -7,7 +7,7 @@ metadata:
 data:
   oauth2_proxy.cfg: |
     provider = "keycloak-oidc"
-    oidc_issuer_url = $OIDC_ISSUER_URL
+    oidc_issuer_url = "$OIDC_ISSUER_URL"
     scope = "profile email roles openid"
     upstreams = "static://200"
     email_domains = [ "*" ]
@@ -46,7 +46,7 @@ data:
     # ---
     code_challenge_method = "S256"
     # ---
-    redirect_url = $REDIRECT_URL
+    redirect_url = "$REDIRECT_URL"
     relative_redirect_url = true
 
 binaryData: {}