diff --git a/global/overlay/etc/puppet/modules/soc/manifests/sso.pp b/global/overlay/etc/puppet/modules/soc/manifests/sso.pp
index 3001db2..17795e0 100644
--- a/global/overlay/etc/puppet/modules/soc/manifests/sso.pp
+++ b/global/overlay/etc/puppet/modules/soc/manifests/sso.pp
@@ -188,7 +188,7 @@ class soc::sso(
       # We specify a subnet so that services which have the option/requirement can
       # specify this subnet as source of trusted proxies. This is used in Graylog,
       # for example; see setting "trusted_proxies".
-      command => 'docker network create sso --subnet 172.29.0.0/24 || true'
+      command => 'docker network create sso --subnet 172.29.0.0/24 || true',
       unless  => 'docker network ls | grep -q sso 2>&1'
     }