diff --git a/docs/admin/authorization/webhook.md b/docs/admin/authorization/webhook.md
index a0ba0f8e38..f451a0d569 100644
--- a/docs/admin/authorization/webhook.md
+++ b/docs/admin/authorization/webhook.md
@@ -31,8 +31,10 @@ A configuration example which uses HTTPS client auth:
 clusters:
   - name: name-of-remote-authz-service
     cluster:
-      certificate-authority: /path/to/ca.pem      # CA for verifying the remote service.
-      server: https://authz.example.com/authorize # URL of remote service to query. Must use 'https'.
+      # CA for verifying the remote service.
+      certificate-authority: /path/to/ca.pem
+      # URL of remote service to query. Must use 'https'. May not include parameters.
+      server: https://authz.example.com/authorize
 
 # users refers to the API Server's webhook configuration.
 users: