diff --git a/scripts/helmcharts/openreplay/charts/http/templates/deployment.yaml b/scripts/helmcharts/openreplay/charts/http/templates/deployment.yaml
index 4ecc87dd7..a7eb11693 100644
--- a/scripts/helmcharts/openreplay/charts/http/templates/deployment.yaml
+++ b/scripts/helmcharts/openreplay/charts/http/templates/deployment.yaml
@@ -95,6 +95,8 @@ spec:
               value: {{ .Values.global.jwtSecret }}
             - name: JWT_SPOT_SECRET
               value: {{ .Values.global.jwtSpotSecret }}
+            - name: TOKEN_SECRET
+              value: {{ .Values.global.tokenSecret }}
           ports:
             {{- range $key, $val := .Values.service.ports }}
             - name: {{ $key }}
diff --git a/scripts/helmcharts/vars.yaml b/scripts/helmcharts/vars.yaml
index 43c1375dd..8872068d8 100644
--- a/scripts/helmcharts/vars.yaml
+++ b/scripts/helmcharts/vars.yaml
@@ -124,6 +124,7 @@ global:
   assistJWTSecret: "{{ randAlphaNum 20}}"
   jwtSecret: "{{ randAlphaNum 20}}"
   jwtSpotSecret: "{{ randAlphaNum 20}}"
+  tokenSecret: "{{randAlphaNum 20}}"
   # In case of multiple nodes in the kubernetes cluster,
   # we'll have to create an RWX PVC for shared components.
   # If it's a single node, we'll use hostVolume, which is the default for the community/oss edition.