diff --git a/src/current/v25.3/secure-cockroachdb-kubernetes.md b/src/current/v25.3/secure-cockroachdb-kubernetes.md
index fc14a375b08..24c670b0e76 100644
--- a/src/current/v25.3/secure-cockroachdb-kubernetes.md
+++ b/src/current/v25.3/secure-cockroachdb-kubernetes.md
@@ -50,8 +50,8 @@ spec:
 
 Replace:
 
-- `{node_secret_name}`: the name of the Kubernetes secret that contains the generated client certificate and key.
-- `{client_secret_name}`: the name of the Kubernetes secret that contains the generated node certificate and key.
+- `{node_secret_name}`: the name of the Kubernetes secret that contains the generated node certificate and key.
+- `{client_secret_name}`: the name of the Kubernetes secret that contains the generated client certificate and key.
 
 {{site.data.alerts.callout_info}}
 Currently, the {{ site.data.products.public-operator }} requires that the client and node secrets each contain the filenames `tls.crt` and `tls.key`.