diff --git a/base/notify-api/api-deployment.yaml b/base/notify-api/api-deployment.yaml
index 2a21194ce..a4e5d6be0 100644
--- a/base/notify-api/api-deployment.yaml
+++ b/base/notify-api/api-deployment.yaml
@@ -238,6 +238,8 @@ spec:
               value: '$(SQLALCHEMY_DATABASE_READER_URI)'
             - name: SQLALCHEMY_POOL_SIZE
               value: '$(SQLALCHEMY_POOL_SIZE)'
+            - name: SRE_CLIENT_SECRET
+              value: '$(SRE_CLIENT_SECRET)'
             - name: STATSD_HOST
               valueFrom:
                 fieldRef:
diff --git a/env.example b/env.example
index 2b37985dd..81f45f232 100644
--- a/env.example
+++ b/env.example
@@ -82,3 +82,4 @@ FF_BOUNCE_RATE_V15=
 FF_BOUNCE_RATE_BACKEND=
 FF_ABTEST_SERVICE_ID=
 FF_EMAIL_DAILY_LIMIT=
+SRE_CLIENT_SECRET=
diff --git a/env/dev/.env.zip.enc.aws b/env/dev/.env.zip.enc.aws
index bedacdfdc..c0104356c 100644
Binary files a/env/dev/.env.zip.enc.aws and b/env/dev/.env.zip.enc.aws differ
diff --git a/env/dev/kustomization.yaml b/env/dev/kustomization.yaml
index b1c4163d8..f50c294f5 100644
--- a/env/dev/kustomization.yaml
+++ b/env/dev/kustomization.yaml
@@ -607,3 +607,10 @@ vars:
     apiVersion: v1
   fieldref:
     fieldpath: data.FF_EMAIL_DAILY_LIMIT
+- name: SRE_CLIENT_SECRET
+  objref:
+    kind: ConfigMap
+    name: application-config
+    apiVersion: v1
+  fieldref:
+    fieldpath: data.SRE_CLIENT_SECRET
diff --git a/env/production/.env.zip.enc.aws b/env/production/.env.zip.enc.aws
index 19a98c83b..68b969610 100644
Binary files a/env/production/.env.zip.enc.aws and b/env/production/.env.zip.enc.aws differ
diff --git a/env/production/kustomization.yaml b/env/production/kustomization.yaml
index 695640b6e..fbcff56c8 100644
--- a/env/production/kustomization.yaml
+++ b/env/production/kustomization.yaml
@@ -597,4 +597,11 @@ vars:
       name: application-config
       apiVersion: v1
     fieldref:
-      fieldpath: data.FF_EMAIL_DAILY_LIMIT
\ No newline at end of file
+      fieldpath: data.FF_EMAIL_DAILY_LIMIT
+  - name: SRE_CLIENT_SECRET
+    objref:
+      kind: ConfigMap
+      name: application-config
+      apiVersion: v1
+    fieldref:
+      fieldpath: data.FF_EMAIL_DAILY_LIMIT
diff --git a/env/scratch/kustomization.yaml b/env/scratch/kustomization.yaml
index b2458a9bb..80361eb94 100644
--- a/env/scratch/kustomization.yaml
+++ b/env/scratch/kustomization.yaml
@@ -605,3 +605,10 @@ vars:
     apiVersion: v1
   fieldref:
     fieldpath: data.FF_EMAIL_DAILY_LIMIT
+- name: SRE_CLIENT_SECRET
+  objref:
+    kind: ConfigMap
+    name: application-config
+    apiVersion: v1
+  fieldref:
+    fieldpath: data.SRE_CLIENT_SECRET
diff --git a/env/staging/.env.zip.enc.aws b/env/staging/.env.zip.enc.aws
index eed3c158d..676253972 100644
Binary files a/env/staging/.env.zip.enc.aws and b/env/staging/.env.zip.enc.aws differ
diff --git a/env/staging/kustomization.yaml b/env/staging/kustomization.yaml
index 7f12b1ad5..ad3fe7e6c 100644
--- a/env/staging/kustomization.yaml
+++ b/env/staging/kustomization.yaml
@@ -608,3 +608,10 @@ vars:
     apiVersion: v1
   fieldref:
     fieldpath: data.FF_EMAIL_DAILY_LIMIT
+- name: SRE_CLIENT_SECRET
+  objref:
+    kind: ConfigMap
+    name: application-config
+    apiVersion: v1
+  fieldref:
+    fieldpath: data.SRE_CLIENT_SECRET