diff --git a/Kubernetes-ServiceAccount-Authentication.md b/Kubernetes-ServiceAccount-Authentication.md
index 1de021b..20355d2 100644
--- a/Kubernetes-ServiceAccount-Authentication.md
+++ b/Kubernetes-ServiceAccount-Authentication.md
@@ -17,7 +17,7 @@ The result: pods authenticate to the S3 gateway with a short-lived, auto-rotated
 ```
 Pod                         kube-apiserver / JWKS            SeaweedFS S3 gateway
  |                                  |                                 |
- | 1. kubelet projects a SA token  |                                 |
+ | 1. kubelet projects a SA token   |                                 |
  |    (OIDC JWT, audience=X)        |                                 |
  |<---------------------------------|                                 |
  |                                                                    |
@@ -30,7 +30,7 @@ Pod                         kube-apiserver / JWKS            SeaweedFS S3 gatewa
  | 5. temporary {AccessKeyId, SecretAccessKey, SessionToken}          |
  |<-------------------------------------------------------------------|
  |                                                                    |
- | 6. normal S3 calls signed with the temporary credentials          |
+ | 6. normal S3 calls signed with the temporary credentials           |
  |------------------------------------------------------------------->|
 ```