diff --git a/docs/04-certificate-authority.md b/docs/04-certificate-authority.md
index 85ffc7e..490fcbd 100644
--- a/docs/04-certificate-authority.md
+++ b/docs/04-certificate-authority.md
@@ -106,74 +106,74 @@ Generate a certificate and private key for each Kubernetes worker node:
 ```gcloud```
 ```
 for instance in worker-0 worker-1 worker-2; do
-cat > ${instance}-csr.json <<EOF
-{
-  "CN": "system:node:${instance}",
-  "key": {
-    "algo": "rsa",
-    "size": 2048
-  },
-  "names": [
-    {
-      "C": "US",
-      "L": "Portland",
-      "O": "system:nodes",
-      "OU": "Kubernetes The Hard Way",
-      "ST": "Oregon"
-    }
-  ]
-}
-EOF
+  cat > ${instance}-csr.json <<EOF
+  {
+    "CN": "system:node:${instance}",
+    "key": {
+      "algo": "rsa",
+      "size": 2048
+    },
+    "names": [
+      {
+        "C": "US",
+        "L": "Portland",
+        "O": "system:nodes",
+        "OU": "Kubernetes The Hard Way",
+        "ST": "Oregon"
+      }
+    ]
+  }
+  EOF
 
-EXTERNAL_IP=$(gcloud compute instances describe ${instance} \
-  --format 'value(networkInterfaces[0].accessConfigs[0].natIP)')
+  EXTERNAL_IP=$(gcloud compute instances describe ${instance} \
+    --format 'value(networkInterfaces[0].accessConfigs[0].natIP)')
 
-INTERNAL_IP=$(gcloud compute instances describe ${instance} \
-  --format 'value(networkInterfaces[0].networkIP)')
+  INTERNAL_IP=$(gcloud compute instances describe ${instance} \
+    --format 'value(networkInterfaces[0].networkIP)')
 
-cfssl gencert \
-  -ca=ca.pem \
-  -ca-key=ca-key.pem \
-  -config=ca-config.json \
-  -hostname=${instance},${EXTERNAL_IP},${INTERNAL_IP} \
-  -profile=kubernetes \
-  ${instance}-csr.json | cfssljson -bare ${instance}
+  cfssl gencert \
+    -ca=ca.pem \
+    -ca-key=ca-key.pem \
+    -config=ca-config.json \
+    -hostname=${instance},${EXTERNAL_IP},${INTERNAL_IP} \
+    -profile=kubernetes \
+    ${instance}-csr.json | cfssljson -bare ${instance}
 done
 ```
 
 ```az```
 ```
 for instance in worker-0 worker-1 worker-2; do
-cat > ${instance}-csr.json <<EOF
-{
-  "CN": "system:node:${instance}",
-  "key": {
-    "algo": "rsa",
-    "size": 2048
-  },
-  "names": [
-    {
-      "C": "US",
-      "L": "Portland",
-      "O": "system:nodes",
-      "OU": "Kubernetes The Hard Way",
-      "ST": "Oregon"
-    }
-  ]
-}
-EOF
+  cat > ${instance}-csr.json <<EOF
+  {
+    "CN": "system:node:${instance}",
+    "key": {
+      "algo": "rsa",
+      "size": 2048
+    },
+    "names": [
+      {
+        "C": "US",
+        "L": "Portland",
+        "O": "system:nodes",
+        "OU": "Kubernetes The Hard Way",
+        "ST": "Oregon"
+      }
+    ]
+  }
+  EOF
 
-EXTERNAL_IP=$(az vm show --name worker-0 -d --query publicIps -o tsv)
+  EXTERNAL_IP=$(az vm show --name ${instance} -d --query publicIps -o tsv)
 
-INTERNAL_IP=$(az vm show --name ${instance} -d --query privateIps -o tsv)
+  INTERNAL_IP=$(az vm show --name ${instance} -d --query privateIps -o tsv)
 
-cfssl gencert \
-  -ca=ca.pem \
-  -ca-key=ca-key.pem \
-  -config=ca-config.json \
-  -hostname=${instance},${EXTERNAL_IP},${INTERNAL_IP} \
-  -profile=kubernetes \
-  ${instance}-csr.json | cfssljson -bare ${instance}
+  cfssl gencert \
+    -ca=ca.pem \
+    -ca-key=ca-key.pem \
+    -config=ca-config.json \
+    -hostname=${instance},${EXTERNAL_IP},${INTERNAL_IP} \
+    -profile=kubernetes \
+    ${instance}-csr.json | cfssljson -bare ${instance}
 done
 ```