diff --git a/core-services/ci-secret-bootstrap/_config.yaml b/core-services/ci-secret-bootstrap/_config.yaml
index b41ea286f6cb3..1c5f08cd2c89a 100644
--- a/core-services/ci-secret-bootstrap/_config.yaml
+++ b/core-services/ci-secret-bootstrap/_config.yaml
@@ -2875,12 +2875,12 @@ secret_configs:
     name: cluster-secrets-oci-assisted
     namespace: ci
 - from:
-    osServicePrincipal.json:
-      field: osServicePrincipal.json
-      item: os4-installer.openshift-ci.azure
     baseDomain:
       field: public_hosted_zone
       item: os4-installer.openshift-ci.azure
+    osServicePrincipal.json:
+      field: osServicePrincipal.json
+      item: os4-installer.openshift-ci.azure
     pull-secret:
       dockerconfigJSON:
       - auth_field: token_image-puller_app.ci_reg_auth_value.txt
@@ -3121,12 +3121,12 @@ secret_configs:
     name: cluster-secrets-azurestack
     namespace: ci
 - from:
-    osServicePrincipal.json:
-      field: osServicePrincipal.json
-      item: os4-installer.openshift-ci2.azure
     baseDomain:
       field: public_hosted_zone
       item: os4-installer.openshift-ci2.azure
+    osServicePrincipal.json:
+      field: osServicePrincipal.json
+      item: os4-installer.openshift-ci2.azure
     pull-secret:
       dockerconfigJSON:
       - auth_field: token_image-puller_app.ci_reg_auth_value.txt