diff --git a/docs/docs/install/helm.md b/docs/docs/install/helm.md
index abd0faace..80b21a260 100644
--- a/docs/docs/install/helm.md
+++ b/docs/docs/install/helm.md
@@ -76,7 +76,7 @@ If you haven't already, install cert-manager and create a CA issuer. You can fol
 
    ```bash
    kubectl create secret tls pomerium-tls-ca --namespace=pomerium \
-   --cert=$(mkcert -CAROOT)/rootCA.pem --key=$(mkcert -CAROOT)/rootCA-key.pem
+   --cert="$(mkcert -CAROOT)/rootCA.pem" --key="$(mkcert -CAROOT)/rootCA-key.pem"
    ```
 
 1. Define an Issuer configuration in `issuer.yaml`:
@@ -209,4 +209,4 @@ Congratulations on installing Pomerium to your Kubernetes cluster! If you're ins
 [Kubernetes]: https://kubernetes.io
 [mkcert]: https://github.com/FiloSottile/mkcert
 [Organizing Cluster Access Using kubeconfig Files]: https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/
-[tls certificates]: ../topics/certificates.md
\ No newline at end of file
+[tls certificates]: ../topics/certificates.md