diff --git a/doc/user-guides/secure-protect-connect.md b/doc/user-guides/secure-protect-connect.md
index b41588a56..e88518fde 100644
--- a/doc/user-guides/secure-protect-connect.md
+++ b/doc/user-guides/secure-protect-connect.md
@@ -80,7 +80,7 @@ spec:
     name: glbc-ca
 EOF
 
-k wait tlspolicy api-gateway-tls -n kuadrant-system --for=condition=ready
+kubectl wait tlspolicy api-gateway-tls -n kuadrant-system --for=condition=ready
 
 ```
 
@@ -168,7 +168,7 @@ spec:
 EOF
 
 
-k wait ratelimitpolicy infra-ratelimit -n kuadrant-system --for=condition=available
+kubectl wait ratelimitpolicy infra-ratelimit -n kuadrant-system --for=condition=available
 
 ```
 
@@ -242,13 +242,13 @@ spec:
     kind: Gateway
 EOF
 
-k wait dnspolicy simple-dnspolicy -n kuadrant-system --for=condition=ready
+kubectl wait dnspolicy simple-dnspolicy -n kuadrant-system --for=condition=ready
 ```
 
 If you want to see the DNSRecord created by the this policy, execute 
 
 ```
-k get dnsrecord api-gateway-api -n kuadrant-system -o=yaml
+kubectl get dnsrecord api-gateway-api -n kuadrant-system -o=yaml
 ```
 
 So now we have a wildcard DNS record to bring traffic to our gateway.