diff --git a/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/metacluster/tasks/certauthority.yml b/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/metacluster/tasks/certauthority.yml
index 5e8bd92..e5a4e47 100644
--- a/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/metacluster/tasks/certauthority.yml
+++ b/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/metacluster/tasks/certauthority.yml
@@ -14,8 +14,8 @@
         _template:
           chart_values: >-
             secrets:
-              ca_password: "{{ vapp['metacluster.password'] }}"
-              provisioner_password: "{{ vapp['metacluster.password'] }}"
+              ca_password: "{{ vapp['metacluster.password'] | b64encode }}"
+              provisioner_password: "{{ vapp['metacluster.password'] | b64encode }}"
 
     - name: Retrieve configmap w/ root certificate
       kubernetes.core.k8s_info: