diff --git a/roles/kubernetes/master/templates/secrets_encryption.yaml.j2 b/roles/kubernetes/master/templates/secrets_encryption.yaml.j2
index 0fc4bb850555832d96f6e41d20f14b5f15f38edf..fae9bab32bca40e50d32a6b4b9aa390c1ec9c1a0 100644
--- a/roles/kubernetes/master/templates/secrets_encryption.yaml.j2
+++ b/roles/kubernetes/master/templates/secrets_encryption.yaml.j2
@@ -1,7 +1,8 @@
 kind: EncryptionConfig
 apiVersion: v1
 resources:
-  - resources: {{ kube_encryption_resources }}
+  - resources:
+{{ kube_encryption_resources|to_nice_yaml|indent(4, True) }}
     providers:
     - {{ kube_encryption_algorithm }}:
         keys: