diff --git a/deployment/keystone/keystone-container-puppet.yaml b/deployment/keystone/keystone-container-puppet.yaml
index e5bc071f0b..03141117ca 100644
--- a/deployment/keystone/keystone-container-puppet.yaml
+++ b/deployment/keystone/keystone-container-puppet.yaml
@@ -535,17 +535,16 @@ outputs:
             # internal_api_subnet - > IP/CIDR
             # NOTE: this applies to all 2 bind IP settings below...
             keystone::wsgi::apache::bind_host:
-              str_replace:
-                template:
-                  "%{hiera('$NETWORK')}"
-                params:
-                  $NETWORK: {get_param: [ServiceNetMap, KeystonePublicApiNetwork]}
-            keystone::wsgi::apache::admin_bind_host:
-              str_replace:
-                template:
-                  "%{hiera('$NETWORK')}"
-                params:
-                  $NETWORK: {get_param: [ServiceNetMap, KeystoneAdminApiNetwork]}
+              - str_replace:
+                  template:
+                    "%{hiera('$NETWORK')}"
+                  params:
+                    $NETWORK: {get_param: [ServiceNetMap, KeystonePublicApiNetwork]}
+              - str_replace:
+                  template:
+                    "%{hiera('$NETWORK')}"
+                  params:
+                    $NETWORK: {get_param: [ServiceNetMap, KeystoneAdminApiNetwork]}
             keystone::cron::token_flush::ensure: {get_param: KeystoneCronTokenFlushEnsure}
             keystone::cron::token_flush::minute: {get_param: KeystoneCronTokenFlushMinute}
             keystone::cron::token_flush::hour: {get_param: KeystoneCronTokenFlushHour}