diff --git a/roles/kubernetes/secrets/templates/openssl.conf.j2 b/roles/kubernetes/secrets/templates/openssl.conf.j2
index a25095bd18ee906d589aad630ec0180faecec12c..5c3d3e81433203e9fa79b05345710e47c56a8ec1 100644
--- a/roles/kubernetes/secrets/templates/openssl.conf.j2
+++ b/roles/kubernetes/secrets/templates/openssl.conf.j2
@@ -27,6 +27,7 @@ IP.{{ 2 * loop.index }} = {{ hostvars[host]['ip'] | default(hostvars[host]['ansi
 IP.{{ idx }} = {{ kube_apiserver_ip }}
 {% if loadbalancer_apiserver is defined  %}
 IP.{{ idx + 1 }} = {{ loadbalancer_apiserver.address }}
+{% set idx = idx + 1 %}
 {% endif %}
 IP.{{ idx + 1 }} = 127.0.0.1
 {% if supplementary_addresses_in_ssl_keys is defined %}