diff --git a/roles/etcd/templates/openssl.conf.j2 b/roles/etcd/templates/openssl.conf.j2
index f5970af8121d0e90540e176ca1aa9f100364ce03..48327f0bfa667bd4f325833a6b5e4cc553ba13c3 100644
--- a/roles/etcd/templates/openssl.conf.j2
+++ b/roles/etcd/templates/openssl.conf.j2
@@ -32,9 +32,9 @@ DNS.{{ 1 + loop.index }} = {{ host }}
 DNS.{{ idx | string }} = {{ apiserver_loadbalancer_domain_name }}
 {% endif %}
 {% set idx =  groups['etcd'] | length | int + 3 %}
-{%- for etcd_alt_name in etcd_cert_alt_names -%}
+{% for etcd_alt_name in etcd_cert_alt_names %}
 DNS.{{ idx + 1 + loop.index }} = {{ etcd_alt_name }}
-{%- endfor -%}
+{% endfor %}
 {% for host in groups['etcd'] %}
 IP.{{ 2 * loop.index - 1 }} = {{ hostvars[host]['access_ip'] | default(hostvars[host]['ansible_default_ipv4']['address']) }}
 IP.{{ 2 * loop.index }} = {{ hostvars[host]['ip'] | default(hostvars[host]['ansible_default_ipv4']['address']) }}