diff --git a/roles/network_plugin/cilium/templates/hubble/deploy.yml.j2 b/roles/network_plugin/cilium/templates/hubble/deploy.yml.j2
index 6d2b9cb2277..86533e6e785 100644
--- a/roles/network_plugin/cilium/templates/hubble/deploy.yml.j2
+++ b/roles/network_plugin/cilium/templates/hubble/deploy.yml.j2
@@ -60,7 +60,8 @@ spec:
           - mountPath: /var/lib/hubble-relay/tls
             name: tls
             readOnly: true
-          {% endif %}
+          {%- endif %}
+
       restartPolicy: Always
       serviceAccount: hubble-relay
       serviceAccountName: hubble-relay
@@ -96,7 +97,8 @@ spec:
                 - key: tls.key
                   path: server.key
         name: tls
-      {% endif %}
+      {%- endif %}
+
 ---
 # Source: cilium/templates/hubble-ui/deployment.yaml
 kind: Deployment