diff --git a/provider/k8s/template/app/app.yml.tmpl b/provider/k8s/template/app/app.yml.tmpl
index ad94b34..e7244f2 100644
--- a/provider/k8s/template/app/app.yml.tmpl
+++ b/provider/k8s/template/app/app.yml.tmpl
@@ -3,7 +3,7 @@ kind: Namespace
 metadata:
   name: {{.Namespace}}
   annotations:
-    convox.com/lock: {{ .Locked }}
+    convox.com/lock: "{{ .Locked }}"
     convox.com/params: {{ safe (json .Parameters) }}
   labels:
     type: app
diff --git a/provider/k8s/testdata/app-locked.yml b/provider/k8s/testdata/app-locked.yml
index c01bcc8..0679188 100644
--- a/provider/k8s/testdata/app-locked.yml
+++ b/provider/k8s/testdata/app-locked.yml
@@ -2,7 +2,7 @@ apiVersion: v1
 kind: Namespace
 metadata:
   annotations:
-    convox.com/lock: true
+    convox.com/lock: "true"
     convox.com/params: '{"Test":"foo"}'
   labels:
     app: app1
diff --git a/provider/k8s/testdata/app-params.yml b/provider/k8s/testdata/app-params.yml
index f64f44b..29f7429 100644
--- a/provider/k8s/testdata/app-params.yml
+++ b/provider/k8s/testdata/app-params.yml
@@ -2,7 +2,7 @@ apiVersion: v1
 kind: Namespace
 metadata:
   annotations:
-    convox.com/lock: false
+    convox.com/lock: "false"
     convox.com/params: '{"Test":"bar"}'
   labels:
     app: app1
diff --git a/provider/k8s/testdata/app.yml b/provider/k8s/testdata/app.yml
index 7ae1d9b..8dd4b97 100644
--- a/provider/k8s/testdata/app.yml
+++ b/provider/k8s/testdata/app.yml
@@ -2,7 +2,7 @@ apiVersion: v1
 kind: Namespace
 metadata:
   annotations:
-    convox.com/lock: false
+    convox.com/lock: "false"
     convox.com/params: '{"Test":"foo"}'
   labels:
     app: app1