diff --git a/roles/base/templates/krb5.conf.master.j2 b/roles/base/templates/krb5.conf.master.j2
index 65f022748e..a85c13ff94 100644
--- a/roles/base/templates/krb5.conf.master.j2
+++ b/roles/base/templates/krb5.conf.master.j2
@@ -16,7 +16,7 @@ includedir /var/lib/sss/pubconf/krb5.include.d/
  ticket_lifetime = 24h
  renew_lifetime = 7d
  forwardable = true
-{% if env == "staging"
+{% if env == "staging" %}
  dns_canonicalize_hostname = false
  rdns = false
 {% endif %}