diff --git a/templates/gitlab-ci-docker.yml b/templates/gitlab-ci-docker.yml
index a2ccd479010ba392fa9e9bd1186cecddd0413ee3..1e6051bc15cba4a6833f01d90d34d3eb3ab9c091 100644
--- a/templates/gitlab-ci-docker.yml
+++ b/templates/gitlab-ci-docker.yml
@@ -487,7 +487,7 @@ stages:
     - name: "$TBC_TRACKING_IMAGE"
       command: ["--service", "docker", "5.6.1"]
   before_script:
-    - *docker-scripts
+    - !reference [.docker-scripts]
 
 .docker-kaniko-base:
   extends: .docker-base
@@ -501,7 +501,7 @@ stages:
     paths:
       - .cache
   before_script:
-  - *docker-scripts
+  - !reference [.docker-scripts]
   - create_kaniko_cache_dir
 
 
@@ -529,7 +529,7 @@ stages:
           if [[ -n "${_TRACE}" ]]; then echo "Here is the list of all CAs that are trusted by the Docker daemon:"; cat /etc/ssl/certs/ca-certificates.crt; fi
           if [[ -n "${DOCKER_REGISTRY_MIRROR}" ]]; then dockerd-entrypoint.sh --registry-mirror ${DOCKER_REGISTRY_MIRROR}; else dockerd-entrypoint.sh; fi || exit
   before_script:
-    - *docker-scripts
+    - !reference [.docker-scripts]
     - if ! wait_for_docker_daemon; then fail "Docker-in-Docker is not enabled on this runner. Either use a Docker-in-Docker capable runner, or disable this job by setting \$DOCKER_BUILD_TOOL to a different value"; fi
 
 # ==================================================