diff --git a/doc/source/usertasks/kubernetes/internal-ca-and-nodeport-example-2afa2a84603a.rst b/doc/source/usertasks/kubernetes/internal-ca-and-nodeport-example-2afa2a84603a.rst
index ee91c98b4..a28ea1d07 100644
--- a/doc/source/usertasks/kubernetes/internal-ca-and-nodeport-example-2afa2a84603a.rst
+++ b/doc/source/usertasks/kubernetes/internal-ca-and-nodeport-example-2afa2a84603a.rst
@@ -120,7 +120,7 @@ This example requires that:
                 imagePullPolicy: Always
                 ports:
                 - containerPort: 8443
-                protocol: TCP
+                  protocol: TCP
                 volumeMounts:
                 - name: mycert
                   mountPath: "/etc/mycert"  # the files tls.crt, tls.key and ca.crt will be under /etc/mycert/ in container