diff --git a/upgrade-cluster.yml b/upgrade-cluster.yml
index 1eefc5ec5..eea3b69aa 100644
--- a/upgrade-cluster.yml
+++ b/upgrade-cluster.yml
@@ -54,7 +54,7 @@
 - hosts: etcd:k8s-cluster:vault
   any_errors_fatal: true
   roles:
-    - { role: kargo-defaults, when: "cert_management == 'vault'"}}
+    - { role: kargo-defaults, when: "cert_management == 'vault'"}
     - { role: vault, tags: vault, when: "cert_management == 'vault'"}
 
 #Handle upgrades to master components first to maintain backwards compat.