diff --git a/README.md b/README.md
index 9199b6b..4b29b55 100644
--- a/README.md
+++ b/README.md
@@ -247,8 +247,8 @@ rke2_etcd_snapshot_destination_dir: "{{ rke2_data_path }}/server/db/snapshots"
 rke2_snapshotter: "{{ rke2_snapshooter }}"
 rke2_snapshooter: overlayfs # legacy variable that only exists to keep backward compatibility with previous configurations
 
-# Deploy RKE2 with default CNI canal
-rke2_cni: canal
+# Deploy RKE2 with default CNI canal (should be a list)
+rke2_cni: [canal]
 
 # Validate system configuration against the selected benchmark
 # (Supported value is "cis-1.23" or eventually "cis-1.6" if you are running RKE2 prior 1.25)
diff --git a/molecule/ha_cluster_kubevip/converge.yml b/molecule/ha_cluster_kubevip/converge.yml
index aee049b..4936886 100644
--- a/molecule/ha_cluster_kubevip/converge.yml
+++ b/molecule/ha_cluster_kubevip/converge.yml
@@ -4,7 +4,7 @@
   become: yes
   vars:
     rke2_server_taint: true
-    rke2_cni: calico
+    rke2_cni: [calico]
     rke2_api_ip: 192.168.123.100
     rke2_version: v1.22.12+rke2r1
     rke2_cis_profile: cis-1.23