diff --git a/docs/provisioning-windows/2026-10-04-1000/keycape/eso.draft.yaml b/docs/provisioning-windows/2026-10-04-1000/keycape/eso.draft.yaml
index 526a9b4..d7afc27 100644
--- a/docs/provisioning-windows/2026-10-04-1000/keycape/eso.draft.yaml
+++ b/docs/provisioning-windows/2026-10-04-1000/keycape/eso.draft.yaml
@@ -16,11 +16,11 @@ spec:
         kubernetes:
           mountPath: kubernetes
           role: external-secrets-keycape-secrets-engine-openbao
-          audiences:
-          - openbao
           serviceAccountRef:
             name: external-secrets
             namespace: external-secrets
+            audiences:
+            - openbao
   conditions:
   - namespaces:
     - sso