diff --git a/services/keycloak/oneoffs/metis-node-passwords-secret-ensure-job.yaml b/services/keycloak/oneoffs/metis-node-passwords-secret-ensure-job.yaml
index bb357d24..aa21110c 100644
--- a/services/keycloak/oneoffs/metis-node-passwords-secret-ensure-job.yaml
+++ b/services/keycloak/oneoffs/metis-node-passwords-secret-ensure-job.yaml
@@ -1,11 +1,11 @@
 # services/keycloak/oneoffs/metis-node-passwords-secret-ensure-job.yaml
-# One-off job for sso/metis-node-passwords-secret-ensure-1.
+# One-off job for sso/metis-node-passwords-secret-ensure-2.
 # Purpose: ensure per-node Metis recovery password placeholders exist in Vault.
 # Existing values are preserved; only missing fields are initialized.
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: metis-node-passwords-secret-ensure-1
+  name: metis-node-passwords-secret-ensure-2
   namespace: sso
 spec:
   backoffLimit: 0