diff --git a/tmpl/kubernetes/cloudflared-secret.sops.yaml b/tmpl/kubernetes/cloudflared-secret.sops.yaml
index 7201bde1..7027e757 100644
--- a/tmpl/kubernetes/cloudflared-secret.sops.yaml
+++ b/tmpl/kubernetes/cloudflared-secret.sops.yaml
@@ -4,7 +4,7 @@ kind: Secret
 metadata:
   name: cloudflared-secret
   namespace: networking
-data:
+stringData:
   TUNNEL_ID: "${BOOTSTRAP_CLOUDFLARE_TUNNEL_ID}"
   credentials.json: |
     {