diff --git a/content/en/docs/tasks/administer-cluster/kms-provider.md b/content/en/docs/tasks/administer-cluster/kms-provider.md
index 601b0fb97d..cfd0e23d6e 100644
--- a/content/en/docs/tasks/administer-cluster/kms-provider.md
+++ b/content/en/docs/tasks/administer-cluster/kms-provider.md
@@ -89,7 +89,7 @@ resources:
         name: myKmsPlugin
         endpoint: unix:///tmp/socketfile.sock
         cachesize: 100
-   - identity: {}
+    - identity: {}
 ```
 
 2. Set the `--encryption-provider-config` flag on the kube-apiserver to point to the location of the configuration file.