diff --git a/charts/base-cluster/templates/monitoring/kube-prometheus-stack/_grafana-config.yaml b/charts/base-cluster/templates/monitoring/kube-prometheus-stack/_grafana-config.yaml
index 12a277c470..f999092b21 100644
--- a/charts/base-cluster/templates/monitoring/kube-prometheus-stack/_grafana-config.yaml
+++ b/charts/base-cluster/templates/monitoring/kube-prometheus-stack/_grafana-config.yaml
@@ -24,6 +24,7 @@ auth.generic_oauth:
   name: OAuth
   role_attribute_path: {{ .grafana.roleAttributePath | quote }}
   scopes: openid profile email
+  use_pkce: true
   {{- end -}}
 {{- end -}}