diff --git a/roles/installer/templates/config.yaml.j2 b/roles/installer/templates/config.yaml.j2
index 283501d5..e94b86c4 100644
--- a/roles/installer/templates/config.yaml.j2
+++ b/roles/installer/templates/config.yaml.j2
@@ -101,11 +101,6 @@ data:
     BROADCAST_WEBSOCKET_PORT = 8052
     BROADCAST_WEBSOCKET_PROTOCOL = 'http'
 
-    # Load LDAP BIND password from Kubernetes secret if define
-    {% if ldap_password_secret -%}
-    AUTH_LDAP_BIND_PASSWORD = "{{ ldap_bind_password }}"
-    {% endif %}
-
 {% for item in extra_settings | default([]) %}
     {{ item.setting }} = {{ item.value }}
 {% endfor %}
diff --git a/roles/installer/templates/ldap.py.j2 b/roles/installer/templates/ldap.py.j2
index cbfc6f7f..aa50cfcf 100644
--- a/roles/installer/templates/ldap.py.j2
+++ b/roles/installer/templates/ldap.py.j2
@@ -4,3 +4,8 @@ AUTH_LDAP_GLOBAL_OPTIONS = {
     ldap.OPT_X_TLS_CACERTFILE: "/etc/openldap/certs/ldap-ca.crt"
 {% endif %}
 }
+
+# Load LDAP BIND password from Kubernetes secret if define
+{% if ldap_password_secret -%}
+AUTH_LDAP_BIND_PASSWORD = "{{ ldap_bind_password }}"
+{% endif %}