diff --git a/apis/concierge/authentication/v1alpha1/types_jwt.go.tmpl b/apis/concierge/authentication/v1alpha1/types_jwt.go.tmpl
index 0087fad4..3e159148 100644
--- a/apis/concierge/authentication/v1alpha1/types_jwt.go.tmpl
+++ b/apis/concierge/authentication/v1alpha1/types_jwt.go.tmpl
@@ -27,8 +27,8 @@ type JWTAuthenticatorSpec struct {
 	// +kubebuilder:validation:MinLength=1
 	Audience string `json:"audience"`
 
-    // Claims allows customization of the claims that will be mapped to user identity
-    // for Kubernetes access.
+	// Claims allows customization of the claims that will be mapped to user identity
+	// for Kubernetes access.
 	// +optional
 	Claims JWTTokenClaims `json:"claims"`
 
@@ -41,12 +41,12 @@ type JWTAuthenticatorSpec struct {
 // for Kubernetes access.
 type JWTTokenClaims struct {
 	// Groups is the name of the claim which should be read to extract the user's
-    // group membership from the JWT token. When not specified, it will default to "groups".
+	// group membership from the JWT token. When not specified, it will default to "groups".
 	// +optional
 	Groups string `json:"groups"`
 
 	// Username is the name of the claim which should be read to extract the
-    // username from the JWT token. When not specified, it will default to "username".
+	// username from the JWT token. When not specified, it will default to "username".
 	// +optional
 	Username string `json:"username"`
 }