diff --git a/doc/source/security/kubernetes/create-first-system-administrator-1775e1b20941.rst b/doc/source/security/kubernetes/create-first-system-administrator-1775e1b20941.rst
index 451d58776..2c60ae5e2 100644
--- a/doc/source/security/kubernetes/create-first-system-administrator-1775e1b20941.rst
+++ b/doc/source/security/kubernetes/create-first-system-administrator-1775e1b20941.rst
@@ -80,9 +80,9 @@ it can create subsequent system administrators and end users.
                metadata:
                   name: Level1SystemAdmin
                subjects:
-                  kind: Group
-                  name: Level1SystemAdmin
-                  apiGroup: rbac.authorization.k8s.io
+                 - kind: Group
+                   name: Level1SystemAdmin
+                   apiGroup: rbac.authorization.k8s.io
                roleRef:
                   kind: ClusterRole
                   name: cluster-admin
@@ -91,7 +91,6 @@ it can create subsequent system administrators and end users.
 
                $ kubectl apply -f /home/sysadmin/users/Level1SystemAdmin-clusterrolebinding.yml
 
-
 #.   Create a new local |LDAP| user for the first system administrator.
 
      .. code-block::