diff --git a/roles/kubernetes/master/templates/secrets_encryption.yaml.j2 b/roles/kubernetes/master/templates/secrets_encryption.yaml.j2
index 0fc4bb850..fae9bab32 100644
--- a/roles/kubernetes/master/templates/secrets_encryption.yaml.j2
+++ b/roles/kubernetes/master/templates/secrets_encryption.yaml.j2
@@ -1,7 +1,8 @@
 kind: EncryptionConfig
 apiVersion: v1
 resources:
-  - resources: {{ kube_encryption_resources }}
+  - resources:
+{{ kube_encryption_resources|to_nice_yaml|indent(4, True) }}
     providers:
     - {{ kube_encryption_algorithm }}:
         keys: