diff --git a/docs/concepts/architecture/master-node-communication.md b/docs/concepts/architecture/master-node-communication.md
index c94a4e8aed..1d78c5f920 100644
--- a/docs/concepts/architecture/master-node-communication.md
+++ b/docs/concepts/architecture/master-node-communication.md
@@ -74,7 +74,7 @@ which makes the connection subject to man-in-the-middle attacks, and
 **unsafe** to run over untrusted and/or public networks.
 
 To verify this connection, use the `--kubelet-certificate-authority` flag to
-provide the apiserver with a root certificates bundle to use to verify the
+provide the apiserver with a root certificate bundle to use to verify the
 kubelet's serving certificate.
 
 If that is not possible, use [SSH tunneling](/docs/concepts/architecture/master-node-communication/#ssh-tunnels)