diff --git a/k8s/cronjob.tf b/k8s/cronjob.tf
index bed6b7d9..eb2e1bfb 100644
--- a/k8s/cronjob.tf
+++ b/k8s/cronjob.tf
@@ -107,7 +107,7 @@ resource "kubernetes_cron_job_v1" "fleet_vuln_processing_cron_job" {
               dynamic "env" {
                 for_each = local.database.tls.enabled ? [
                   { name = "FLEET_MYSQL_TLS_CA", value = "/secrets/mysql/${local.database.tls.ca_cert_key}" },
-                  { name = "FLEET_MYSQL_TLS_CERT", value = "/secrets/mysql/${local.database.tls.cert_secret_key}" },
+                  { name = "FLEET_MYSQL_TLS_CERT", value = "/secrets/mysql/${local.database.tls.cert_key}" },
                   { name = "FLEET_MYSQL_TLS_KEY", value = "/secrets/mysql/${local.database.tls.key_key}" },
                   { name = "FLEET_MYSQL_TLS_CONFIG", value = local.database.tls.config },
                   { name = "FLEET_MYSQL_TLS_SERVER_NAME", value = local.database.tls.server_name }
@@ -348,7 +348,7 @@ resource "kubernetes_cron_job_v1" "fleet_vuln_processing_cron_job" {
               for_each = local.database.tls.enabled ? [
                 {
                   name        = "mysql-tls",
-                  secret_name = local.database.tls.secret_name
+                  secret_name = local.database.secret_name
                 }
               ] : []
 
diff --git a/k8s/deploy.tf b/k8s/deploy.tf
index 32c3d61b..677d62ac 100644
--- a/k8s/deploy.tf
+++ b/k8s/deploy.tf
@@ -259,7 +259,7 @@ resource "kubernetes_deployment" "fleet" {
           dynamic "env" {
             for_each = local.database.tls.enabled ? [
               { name = "FLEET_MYSQL_TLS_CA", value = "/secrets/mysql/${local.database.tls.ca_cert_key}" },
-              { name = "FLEET_MYSQL_TLS_CERT", value = "/secrets/mysql/${local.database.tls.cert_secret_key}" },
+              { name = "FLEET_MYSQL_TLS_CERT", value = "/secrets/mysql/${local.database.tls.cert_key}" },
               { name = "FLEET_MYSQL_TLS_KEY", value = "/secrets/mysql/${local.database.tls.key_key}" },
               { name = "FLEET_MYSQL_TLS_CONFIG", value = local.database.tls.config },
               { name = "FLEET_MYSQL_TLS_SERVER_NAME", value = local.database.tls.server_name }
@@ -893,7 +893,7 @@ resource "kubernetes_deployment" "fleet" {
           for_each = local.database.tls.enabled ? [
             {
               name        = "mysql-tls",
-              secret_name = local.database.tls.secret_name
+              secret_name = local.database.secret_name
             }
           ] : []
 
diff --git a/k8s/job.tf b/k8s/job.tf
index ff743ff3..0c98585f 100644
--- a/k8s/job.tf
+++ b/k8s/job.tf
@@ -103,7 +103,7 @@ resource "kubernetes_job" "migration" {
           dynamic "env" {
             for_each = local.database.tls.enabled ? [
               { name = "FLEET_MYSQL_TLS_CA", value = "/secrets/mysql/${local.database.tls.ca_cert_key}" },
-              { name = "FLEET_MYSQL_TLS_CERT", value = "/secrets/mysql/${local.database.tls.cert_secret_key}" },
+              { name = "FLEET_MYSQL_TLS_CERT", value = "/secrets/mysql/${local.database.tls.cert_key}" },
               { name = "FLEET_MYSQL_TLS_KEY", value = "/secrets/mysql/${local.database.tls.key_key}" },
               { name = "FLEET_MYSQL_TLS_CONFIG", value = local.database.tls.config },
               { name = "FLEET_MYSQL_TLS_SERVER_NAME", value = local.database.tls.server_name }
@@ -223,7 +223,7 @@ resource "kubernetes_job" "migration" {
           for_each = local.database.tls.enabled ? [
             {
               name        = "mysql-tls",
-              secret_name = local.database.tls.secret_name
+              secret_name = local.database.secret_name
             }
           ] : []