diff --git a/apps/cde/base/cde-flowscallback.yaml b/apps/cde/base/cde-flowscallback.yaml
index 0013bff..62d436c 100644
--- a/apps/cde/base/cde-flowscallback.yaml
+++ b/apps/cde/base/cde-flowscallback.yaml
@@ -28,7 +28,7 @@ spec:
         vault.hashicorp.com/agent-inject-template-cde-env: |-
           {{- with secret "secrets/data/vault/apps/cde" -}}
           {{- range $k, $v := .Data.data }}
-          {{ $k }}={{ printf "%v" $v }}
+          {{ $k }}={{ printf "%q" (printf "%v" $v) }}
           {{- end }}
           {{- end -}}
     spec:
diff --git a/apps/cde/base/cde-splitpdf.yaml b/apps/cde/base/cde-splitpdf.yaml
index 29c369b..3b7b374 100644
--- a/apps/cde/base/cde-splitpdf.yaml
+++ b/apps/cde/base/cde-splitpdf.yaml
@@ -28,7 +28,7 @@ spec:
         vault.hashicorp.com/agent-inject-template-cde-env: |-
           {{- with secret "secrets/data/vault/apps/cde" -}}
           {{- range $k, $v := .Data.data }}
-          {{ $k }}={{ printf "%v" $v }}
+          {{ $k }}={{ printf "%q" (printf "%v" $v) }}
           {{- end }}
           {{- end -}}
     spec:
diff --git a/apps/cde/base/cde-worker-copy.yaml b/apps/cde/base/cde-worker-copy.yaml
index 2bd5e20..02af6f2 100644
--- a/apps/cde/base/cde-worker-copy.yaml
+++ b/apps/cde/base/cde-worker-copy.yaml
@@ -28,7 +28,7 @@ spec:
         vault.hashicorp.com/agent-inject-template-cde-env: |-
           {{- with secret "secrets/data/vault/apps/cde" -}}
           {{- range $k, $v := .Data.data }}
-          {{ $k }}={{ printf "%v" $v }}
+          {{ $k }}={{ printf "%q" (printf "%v" $v) }}
           {{- end }}
           {{- end -}}
     spec:
diff --git a/apps/cde/base/cde-worker-create-versions.yaml b/apps/cde/base/cde-worker-create-versions.yaml
index 73d2328..c141193 100644
--- a/apps/cde/base/cde-worker-create-versions.yaml
+++ b/apps/cde/base/cde-worker-create-versions.yaml
@@ -28,7 +28,7 @@ spec:
         vault.hashicorp.com/agent-inject-template-cde-env: |-
           {{- with secret "secrets/data/vault/apps/cde" -}}
           {{- range $k, $v := .Data.data }}
-          {{ $k }}={{ printf "%v" $v }}
+          {{ $k }}={{ printf "%q" (printf "%v" $v) }}
           {{- end }}
           {{- end -}}
     spec:
diff --git a/apps/cde/base/cde-worker-markings.yaml b/apps/cde/base/cde-worker-markings.yaml
index 0691699..7c1b38d 100644
--- a/apps/cde/base/cde-worker-markings.yaml
+++ b/apps/cde/base/cde-worker-markings.yaml
@@ -28,7 +28,7 @@ spec:
         vault.hashicorp.com/agent-inject-template-cde-env: |-
           {{- with secret "secrets/data/vault/apps/cde" -}}
           {{- range $k, $v := .Data.data }}
-          {{ $k }}={{ printf "%v" $v }}
+          {{ $k }}={{ printf "%q" (printf "%v" $v) }}
           {{- end }}
           {{- end -}}
     spec:
diff --git a/apps/cde/base/cde-worker-sign.yaml b/apps/cde/base/cde-worker-sign.yaml
index a0b5922..8c3da1f 100644
--- a/apps/cde/base/cde-worker-sign.yaml
+++ b/apps/cde/base/cde-worker-sign.yaml
@@ -28,7 +28,7 @@ spec:
         vault.hashicorp.com/agent-inject-template-cde-env: |-
           {{- with secret "secrets/data/vault/apps/cde" -}}
           {{- range $k, $v := .Data.data }}
-          {{ $k }}={{ printf "%v" $v }}
+          {{ $k }}={{ printf "%q" (printf "%v" $v) }}
           {{- end }}
           {{- end -}}
     spec:
diff --git a/apps/cde/base/cde-worker-update-bundles.yaml b/apps/cde/base/cde-worker-update-bundles.yaml
index 39aa8df..f2d15b2 100644
--- a/apps/cde/base/cde-worker-update-bundles.yaml
+++ b/apps/cde/base/cde-worker-update-bundles.yaml
@@ -28,7 +28,7 @@ spec:
         vault.hashicorp.com/agent-inject-template-cde-env: |-
           {{- with secret "secrets/data/vault/apps/cde" -}}
           {{- range $k, $v := .Data.data }}
-          {{ $k }}={{ printf "%v" $v }}
+          {{ $k }}={{ printf "%q" (printf "%v" $v) }}
           {{- end }}
           {{- end -}}
     spec:
diff --git a/apps/cde/base/cde.yaml b/apps/cde/base/cde.yaml
index 3860681..d86522a 100644
--- a/apps/cde/base/cde.yaml
+++ b/apps/cde/base/cde.yaml
@@ -28,7 +28,7 @@ spec:
         vault.hashicorp.com/agent-inject-template-cde-env: |-
           {{- with secret "secrets/data/vault/apps/cde" -}}
           {{- range $k, $v := .Data.data }}
-          {{ $k }}={{ printf "%v" $v }}
+          {{ $k }}={{ printf "%q" (printf "%v" $v) }}
           {{- end }}
           {{- end -}}
     spec: