diff --git a/doc/user-guides/authenticated-rl-with-jwt-and-k8s-authnz.md b/doc/user-guides/authenticated-rl-with-jwt-and-k8s-authnz.md
index b6702dcae..5965592e9 100644
--- a/doc/user-guides/authenticated-rl-with-jwt-and-k8s-authnz.md
+++ b/doc/user-guides/authenticated-rl-with-jwt-and-k8s-authnz.md
@@ -136,9 +136,9 @@ spec:
         kubernetesTokenReview:
           audiences:
           - https://kubernetes.default.svc.cluster.local
-      overrides:
-        "sub":
-          selector: auth.identity.user.username
+        overrides:
+          "sub":
+            selector: auth.identity.user.username
     authorization:
       "k8s-rbac":
         kubernetesSubjectAccessReview: