diff --git a/specs/2024.1/approved/ephemeral-storage-encryption.rst b/specs/2024.1/approved/ephemeral-storage-encryption.rst
index 0d157b7a0..1d6d5e07e 100644
--- a/specs/2024.1/approved/ephemeral-storage-encryption.rst
+++ b/specs/2024.1/approved/ephemeral-storage-encryption.rst
@@ -144,7 +144,8 @@ one swap disk. Each disk will have its own secret.
 This table is intended to illustrate the way secrets are handled in various
 scenarios.
 
-.. code:: rst
+.. table::
+   :align: left
 
    +--------------------+-------------+--------------+------------------------------------------------------+
    | Instance or Image  | Disk        | Secret       | Notes                                                |
@@ -158,7 +159,7 @@ scenarios.
    +--------------------+-------------+--------------+------------------------------------------------------+
    | Image Z (snapshot) | disk (root) | Secret 4     | Secret 4 will *not* be automatically deleted and     |
    | created from       |             | (new secret  | manual deletion will be needed if/when Image Z is    |
-   | Instance A         |             |  is created) | deleted from Glance                                  |
+   | Instance A         |             | is created)  | deleted from Glance                                  |
    +--------------------+-------------+--------------+------------------------------------------------------+
    | Instance B         | disk (root) | Secret 5     | Secret 5, 6, and 7 will be automatically deleted     |
    | created from       +-------------+--------------+ by Nova when Instance B is deleted and its disks are |
@@ -182,7 +183,7 @@ scenarios.
    +--------------------+-------------+--------------+------------------------------------------------------+
    | Rescue disk        | disk (root) | Secret 11    | Secret 11 is stashed in the instance's system        |
    | created by rescue  |             | (new secret  | metadata with key                                    |
-   | of Instance A      |             |  is created) | ``rescue_disk_ephemeral_encryption_secret_uuid``.    |
+   | of Instance A      |             | is created)  | ``rescue_disk_ephemeral_encryption_secret_uuid``.    |
    |                    |             |              | This is done because a BDM record for the rescue     |
    |                    |             |              | disk is not going to be persisted to the database.   |
    +--------------------+-------------+--------------+------------------------------------------------------+