diff --git a/modules/vault_cluster/modules/kubernetes_secret_backend_role/main.tf b/modules/vault_cluster/modules/kubernetes_secret_backend_role/main.tf
index 8e56de5..edcace4 100644
--- a/modules/vault_cluster/modules/kubernetes_secret_backend_role/main.tf
+++ b/modules/vault_cluster/modules/kubernetes_secret_backend_role/main.tf
@@ -16,7 +16,7 @@ locals {
 resource "vault_kubernetes_secret_backend_role" "role" {
   backend                       = var.backend
   name                          = var.name
-  allowed_kubernetes_namespaces = var.allowed_kubernetes_namespaces
+  allowed_kubernetes_namespaces = sort(var.allowed_kubernetes_namespaces)
   kubernetes_role_type          = local.use_service_account ? null : var.kubernetes_role_type
   generated_role_rules          = local.use_service_account ? null : file("${path.module}/../../../../../../../../${local.role_rules_file}")
   service_account_name          = var.service_account_name