diff --git a/components/sandbox/toolchain-host-operator/base/monitoring/monitor.yaml b/components/sandbox/toolchain-host-operator/base/monitoring/monitor.yaml
index 941b21d0b8d..4ed44e97c55 100644
--- a/components/sandbox/toolchain-host-operator/base/monitoring/monitor.yaml
+++ b/components/sandbox/toolchain-host-operator/base/monitoring/monitor.yaml
@@ -3,7 +3,7 @@ kind: ServiceMonitor
 metadata:
   name: host-operator-metrics
   labels:
-    apps: host-operator
+    control-plane: controller-manager
 spec:
   endpoints:
     - interval: 15s
@@ -18,4 +18,4 @@ spec:
         insecureSkipVerify: true
   selector:
     matchLabels:
-      apps: host-operator
+      control-plane: controller-manager
diff --git a/components/sandbox/toolchain-host-operator/base/monitoring/sandbox-registration-service-proxy.yaml b/components/sandbox/toolchain-host-operator/base/monitoring/sandbox-registration-service-proxy.yaml
index ba1dac29a9d..cc728f44a78 100644
--- a/components/sandbox/toolchain-host-operator/base/monitoring/sandbox-registration-service-proxy.yaml
+++ b/components/sandbox/toolchain-host-operator/base/monitoring/sandbox-registration-service-proxy.yaml
@@ -47,9 +47,10 @@ spec:
       scheme: http
       path: /metrics
       port: proxy-metrics
-      bearerTokenSecret:
-        name: "registration-service-metrics-reader"
-        key: token
+      authorization:
+        credentials:
+          key: token
+          name: "registration-service-metrics-reader"
   selector:
     matchLabels:
       run: proxy-metrics