diff --git a/inventory/host_vars/openqa-aarch64-01.arm.fedoraproject.org b/inventory/host_vars/openqa-aarch64-01.arm.fedoraproject.org
index 5ca295a4e5..f0b940d3e9 100644
--- a/inventory/host_vars/openqa-aarch64-01.arm.fedoraproject.org
+++ b/inventory/host_vars/openqa-aarch64-01.arm.fedoraproject.org
@@ -22,7 +22,7 @@ sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
 # else alone. We use a variable definition here so the firewall config
 # (in the openqa_tap_workers group_vars) can reuse it.
 openqa_tap_iface: eth0
-ansible_ifcfg_whitelist: [{{ openqa_tap_iface }}, 'eth1', 'eth2']
+ansible_ifcfg_whitelist: ['{{ openqa_tap_iface }}', 'eth1', 'eth2']
 ansible_ifcfg_disabled: ['eth1', 'eth2']
 
 # this is a powerful machine, can handle more openQA workers
diff --git a/inventory/host_vars/openqa-ppc64le-02.qa.fedoraproject.org b/inventory/host_vars/openqa-ppc64le-02.qa.fedoraproject.org
index e82a93a8e3..b24c1ca850 100644
--- a/inventory/host_vars/openqa-ppc64le-02.qa.fedoraproject.org
+++ b/inventory/host_vars/openqa-ppc64le-02.qa.fedoraproject.org
@@ -21,7 +21,7 @@ sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
 # else alone. We use a variable definition here so the firewall config
 # (in the openqa_tap_workers group_vars) can reuse it.
 openqa_tap_iface: eth2
-ansible_ifcfg_whitelist: ['eth0', 'eth1', {{ openqa_tap_iface }}, 'eth3']
+ansible_ifcfg_whitelist: ['eth0', 'eth1', '{{ openqa_tap_iface }}', 'eth3']
 ansible_ifcfg_disabled: ['eth0', 'eth1', 'eth3']
 
 # this is a powerful machine, can handle more openQA workers
diff --git a/inventory/host_vars/qa01.qa.fedoraproject.org b/inventory/host_vars/qa01.qa.fedoraproject.org
index e65678b87d..001ec0d6b3 100644
--- a/inventory/host_vars/qa01.qa.fedoraproject.org
+++ b/inventory/host_vars/qa01.qa.fedoraproject.org
@@ -20,7 +20,7 @@ gw: 10.5.124.254
 # else alone. We use a variable definition here so the firewall config
 # (in the openqa_tap_workers group_vars) can reuse it.
 openqa_tap_iface: em3
-ansible_ifcfg_whitelist: ['em1', 'em2', {{ openqa_tap_iface }}, 'em4']
+ansible_ifcfg_whitelist: ['em1', 'em2', '{{ openqa_tap_iface }}', 'em4']
 ansible_ifcfg_disabled: ['em1', 'em2', 'em4']
 
 # Has a hardware RNG
diff --git a/inventory/host_vars/qa02.qa.fedoraproject.org b/inventory/host_vars/qa02.qa.fedoraproject.org
index c30b4c07e4..a6dfc81bcc 100644
--- a/inventory/host_vars/qa02.qa.fedoraproject.org
+++ b/inventory/host_vars/qa02.qa.fedoraproject.org
@@ -20,7 +20,7 @@ gw: 10.5.124.254
 # else alone. We use a variable definition here so the firewall config
 # (in the openqa_tap_workers group_vars) can reuse it.
 openqa_tap_iface: em3
-ansible_ifcfg_whitelist: ['em1', 'em2', {{ openqa_tap_iface }}, 'em4']
+ansible_ifcfg_whitelist: ['em1', 'em2', '{{ openqa_tap_iface }}', 'em4']
 ansible_ifcfg_disabled: ['em1', 'em2', 'em4']
 
 # Has a hardware RNG