diff --git a/salt/elasticsearch/defaults.yaml b/salt/elasticsearch/defaults.yaml
index 5449df506..807ca9ea9 100644
--- a/salt/elasticsearch/defaults.yaml
+++ b/salt/elasticsearch/defaults.yaml
@@ -4922,39 +4922,46 @@ elasticsearch:
           allow_custom_routing: false
   so_roles:
     so-manager:
-      node:
-        roles:
-          - master
-          - data
-          - remote_cluster_client
-          - transform
+      config:
+        node:
+          roles:
+            - master
+            - data
+            - remote_cluster_client
+            - transform
     so-managersearch:
-      node:
-        roles:
-          - master
-          - data_hot
-          - remote_cluster_client
+      config:
+        node:
+          roles:
+            - master
+            - data_hot
+            - remote_cluster_client
     so-standalone:
-      node:
-        roles:
-          - master
-          - data_hot
-          - remote_cluster_client
+      config:
+        node:
+          roles:
+            - master
+            - data_hot
+            - remote_cluster_client
     so-searchnode:
-      node:
-        roles:
-          - data_hot
-          - ingest
+      config:
+        node:
+          roles:
+            - data_hot
+            - ingest
     so-heavynode:
-      node:
-        roles:
-          - master
-          - data
-          - remote_cluster_client
-          - ingest
+      config:
+        node:
+          roles:
+            - master
+            - data
+            - remote_cluster_client
+            - ingest
     so-eval:
-      node:
-        roles: []
+      config:
+        node:
+          roles: []
     so-import:
-      node:
-        roles: []
+      config:
+        node:
+          roles: []