diff --git a/docs/GALERA.md b/docs/GALERA.md
index 432ab07d..4191bdcd 100644
--- a/docs/GALERA.md
+++ b/docs/GALERA.md
@@ -115,7 +115,7 @@ spec:
       kubernetesAuth:
         enabled: true
 ```
-This Kubernetes-native authentication mechanism eliminates the need for the operator to manage credentials, as it relies entirely on Kubernetes for this purpose. However, the drawback is that the agent requires cluster-wide permissions to impersonate the [`system:auth-delegator`](https://kubernetes.io/docs/reference/access-authn-authz/rbac/#other-component-roles) `ClusterRole` and to create `TokenReviews`, which are cluster-scoped objects.
+This Kubernetes-native authentication mechanism eliminates the need for the operator to manage credentials, as it relies entirely on Kubernetes for this purpose. However, the drawback is that the agent requires cluster-wide permissions to impersonate the [`system:auth-delegator`](https://kubernetes.io/docs/reference/access-authn-authz/rbac/#other-component-roles) `ClusterRole` and to create [`TokenReviews`](https://kubernetes.io/docs/reference/kubernetes-api/authentication-resources/token-review-v1/), which are cluster-scoped objects.
 
 #### Basic authentication