diff --git a/site/content/en/docs/tasks/security/tls-cert-manager.md b/site/content/en/docs/tasks/security/tls-cert-manager.md
index d51fa469e8c..d2b217d0545 100644
--- a/site/content/en/docs/tasks/security/tls-cert-manager.md
+++ b/site/content/en/docs/tasks/security/tls-cert-manager.md
@@ -76,7 +76,7 @@ EOF
 We now have to patch the example Gateway to reference cert-manager:
 
 ```console
-$ kubectl patch gateway/eg --patch-file - <<EOF
+$ kubectl patch gateway/eg --patch '
 metadata:
   annotations:
     cert-manager.io/cluster-issuer: selfsigned
@@ -92,7 +92,7 @@ spec:
       certificateRefs:
       - kind: Secret
         name: eg-https
-EOF
+' --type=merge
 ```
 
 You could instead create a new Gateway serving HTTPS, if you'd prefer.
diff --git a/site/content/en/latest/tasks/security/tls-cert-manager.md b/site/content/en/latest/tasks/security/tls-cert-manager.md
index 997a7ef254d..61ebb5c0162 100644
--- a/site/content/en/latest/tasks/security/tls-cert-manager.md
+++ b/site/content/en/latest/tasks/security/tls-cert-manager.md
@@ -75,7 +75,7 @@ EOF
 We now have to patch the example Gateway to reference cert-manager:
 
 ```console
-$ kubectl patch gateway/eg --patch-file - <<EOF
+$ kubectl patch gateway/eg --patch '
 metadata:
   annotations:
     cert-manager.io/cluster-issuer: selfsigned
@@ -91,7 +91,7 @@ spec:
       certificateRefs:
       - kind: Secret
         name: eg-https
-EOF
+' --type=merge
 ```
 
 You could instead create a new Gateway serving HTTPS, if you'd prefer.
diff --git a/site/content/en/v0.5/user/tls-cert-manager.md b/site/content/en/v0.5/user/tls-cert-manager.md
index 2be531c3ce8..67fbca5742d 100644
--- a/site/content/en/v0.5/user/tls-cert-manager.md
+++ b/site/content/en/v0.5/user/tls-cert-manager.md
@@ -76,7 +76,7 @@ EOF
 We now have to patch the example Gateway to reference cert-manager:
 
 ```console
-$ kubectl patch gateway/eg --patch-file - <<EOF
+$ kubectl patch gateway/eg --patch '
 metadata:
   annotations:
     cert-manager.io/cluster-issuer: selfsigned
@@ -92,7 +92,7 @@ spec:
       certificateRefs:
       - kind: Secret
         name: eg-https
-EOF
+' --type=merge
 ```
 
 You could instead create a new Gateway serving HTTPS, if you'd prefer.
diff --git a/site/content/en/v0.6/user/tls-cert-manager.md b/site/content/en/v0.6/user/tls-cert-manager.md
index aeb5e1a0759..af88ecb7176 100644
--- a/site/content/en/v0.6/user/tls-cert-manager.md
+++ b/site/content/en/v0.6/user/tls-cert-manager.md
@@ -76,7 +76,7 @@ EOF
 We now have to patch the example Gateway to reference cert-manager:
 
 ```console
-$ kubectl patch gateway/eg --patch-file - <<EOF
+$ kubectl patch gateway/eg --patch '
 metadata:
   annotations:
     cert-manager.io/cluster-issuer: selfsigned
@@ -92,7 +92,7 @@ spec:
       certificateRefs:
       - kind: Secret
         name: eg-https
-EOF
+' --type=merge
 ```
 
 You could instead create a new Gateway serving HTTPS, if you'd prefer.
diff --git a/site/content/en/v1.0/tasks/security/tls-cert-manager.md b/site/content/en/v1.0/tasks/security/tls-cert-manager.md
index 07aaf5b4ad8..56f8e14aa1c 100644
--- a/site/content/en/v1.0/tasks/security/tls-cert-manager.md
+++ b/site/content/en/v1.0/tasks/security/tls-cert-manager.md
@@ -76,7 +76,7 @@ EOF
 We now have to patch the example Gateway to reference cert-manager:
 
 ```console
-$ kubectl patch gateway/eg --patch-file - <<EOF
+$ kubectl patch gateway/eg --patch '
 metadata:
   annotations:
     cert-manager.io/cluster-issuer: selfsigned
@@ -92,7 +92,7 @@ spec:
       certificateRefs:
       - kind: Secret
         name: eg-https
-EOF
+' --type=merge
 ```
 
 You could instead create a new Gateway serving HTTPS, if you'd prefer.
diff --git a/site/content/en/v1.1/tasks/security/tls-cert-manager.md b/site/content/en/v1.1/tasks/security/tls-cert-manager.md
index d51fa469e8c..d2b217d0545 100644
--- a/site/content/en/v1.1/tasks/security/tls-cert-manager.md
+++ b/site/content/en/v1.1/tasks/security/tls-cert-manager.md
@@ -76,7 +76,7 @@ EOF
 We now have to patch the example Gateway to reference cert-manager:
 
 ```console
-$ kubectl patch gateway/eg --patch-file - <<EOF
+$ kubectl patch gateway/eg --patch '
 metadata:
   annotations:
     cert-manager.io/cluster-issuer: selfsigned
@@ -92,7 +92,7 @@ spec:
       certificateRefs:
       - kind: Secret
         name: eg-https
-EOF
+' --type=merge
 ```
 
 You could instead create a new Gateway serving HTTPS, if you'd prefer.