diff --git a/ansible/vars/metacluster.yml b/ansible/vars/metacluster.yml
index a256b71..3e64db9 100644
--- a/ansible/vars/metacluster.yml
+++ b/ansible/vars/metacluster.yml
@@ -70,14 +70,14 @@ components:
       parse_logic: helm template . | yq --no-doc eval '.. | .image? | select(.)' | sed '/:/!s/$/:latest/' | sort -u
       chart_values: !unsafe |
         ca:
-        bootstrap:
-          postInitHook: |
-            echo '{{ vapp["guestinfo.rootpw"] }}' > ~/pwfile
-            step ca provisioner add acme \
-              --type ACME \
-              --password-file=~/pwfile \
-              --force-cn
-            rm ~/pwfile
+          bootstrap:
+            postInitHook: |
+              echo '{{ vapp["guestinfo.rootpw"] }}' > ~/pwfile
+              step ca provisioner add acme \
+                --type ACME \
+                --password-file=~/pwfile \
+                --force-cn
+              rm ~/pwfile
           dns: ca.{{ vapp['metacluster.fqdn'] }},step-certificates.step-ca.svc.cluster.local,127.0.0.1
           password: "{{ vapp['guestinfo.rootpw'] }}"
           provisioner: